Risk Manager

Role summary The Risk Manager is responsible for developing, implementing, and maintaining the enterprise risk management framework of Aurum Afghanistan Financial Company (AAFC). The role ensures effective identification, assessment, monitoring, mitigation, and reporting of operational, financial, compliance, strategic, information security, and fraud-related risks across the organization. The Risk Manager will support regulatory compliance requirements, strengthen internal control systems, and promote a risk-aware culture in alignment with Da Afghanistan Bank regulations, company policies, and international financial industry standards. Duties and responsibilities Enterprise Risk Management Develop and maintain the company’s Enterprise Risk Management (ERM) framework. Identify and assess operational, financial, strategic, compliance, and reputational risks. Maintain organizational risk registers and risk assessment reports. Monitor key risk indicators (KRIs) and risk trends. Conduct periodic risk reviews across departments. Operational Risk Management Assess operational vulnerabilities and recommend mitigation measures. Review internal control effectiveness and recommend improvements. Monitor incident reporting and operational loss events. Coordinate risk assessments for new products, services, and processes. Compliance & Regulatory Coordination Coordinate with Compliance Department regarding regulatory risk matters. Support implementation of Da Afghanistan Bank regulatory requirements. Assist in preparing risk-related regulatory reports. Ensure risk management practices align with AML/CFT obligations. Fraud Risk & Internal Control Support fraud risk prevention initiatives. Investigate control weaknesses and recommend corrective actions. Coordinate with Internal Audit and Compliance teams on high-risk findings. Promote fraud awareness and ethical conduct. Reporting & Governance Prepare monthly and quarterly risk reports for senior management and HRC/BOM. Present significant risk exposures and mitigation plans. Escalate critical risks to management promptly. Support governance committees with risk analysis and recommendations. Policy & Framework Development Develop and update: Risk Management Policy Risk Appetite Framework Operational Risk Procedures Incident Reporting Procedures Risk Assessment Methodologies Ensure periodic review and approval of risk-related policies. Business Continuity & Crisis Management Support business continuity planning (BCP). Participate in disaster recovery and crisis response exercises. Assess operational resilience risks. Training & Awareness Conduct risk awareness sessions for employees. Promote risk culture throughout the organization. Advice department heads on risk mitigation strategies. Job requirements Education Bachelor’s degree in: Finance Economics Accounting Business Administration Risk Management Related field A master’s degree is an advantage. Experience Minimum 5 years of relevant experience in: Risk Management Banking Electronic Money Institutions (EMI) Financial Services Microfinance Compliance/Internal Controls At least 2 years in a supervisory or managerial role preferred. Preferred Certifications Preferred professional certifications include: FRM (Financial Risk Manager) CAMS CIA CISA ISO 31000-related training Other relevant certifications Technical Competencies Enterprise Risk Management Operational Risk Assessment Internal Controls Regulatory Compliance Fraud Risk Analysis Data Analysis & Reporting Risk Reporting Frameworks Microsoft Office Suite Analytical & investigative skills Behavioral Competencies Integrity and professionalism Strong analytical thinking Confidentiality and ethical conduct Leadership and decision-making Communication and presentation skills Attention to detail Problem-solving ability Independent judgment Language Requirements Fluency in English Fluency in Dari and/or Pashto