The Risk Manager is responsible for developing, implementing, and maintaining the enterprise risk management framework of Aurum Afghanistan Financial Company (AAFC). The role ensures effective identification, assessment, monitoring, mitigation, and reporting of operational, financial, compliance, strategic, information security, and fraud-related risks across the organization.

The Risk Manager will support regulatory compliance requirements, strengthen internal control systems, and promote a risk-aware culture in alignment with Da Afghanistan Bank regulations, company policies, and international financial industry standards.

Enterprise Risk Management

• Develop and maintain the company’s Enterprise Risk Management (ERM) framework.
• Identify and assess operational, financial, strategic, compliance, and reputational risks.
• Maintain organizational risk registers and risk assessment reports.
• Monitor key risk indicators (KRIs) and risk trends.
• Conduct periodic risk reviews across departments.

Operational Risk Management

• Assess operational vulnerabilities and recommend mitigation measures.
• Review internal control effectiveness and recommend improvements.
• Monitor incident reporting and operational loss events.
• Coordinate risk assessments for new products, services, and processes.

Compliance & Regulatory Coordination

• Coordinate with Compliance Department regarding regulatory risk matters.
• Support implementation of Da Afghanistan Bank regulatory requirements.
• Assist in preparing risk-related regulatory reports.
• Ensure risk management practices align with AML/CFT obligations.

Fraud Risk & Internal Control

• Support fraud risk prevention initiatives.
• Investigate control weaknesses and recommend corrective actions.
• Coordinate with Internal Audit and Compliance teams on high-risk findings.
• Promote fraud awareness and ethical conduct.

Reporting & Governance

• Prepare monthly and quarterly risk reports for senior management and HRC/BOM.
• Present significant risk exposures and mitigation plans.
• Escalate critical risks to management promptly.
• Support governance committees with risk analysis and recommendations.

Policy & Framework Development

• Develop and update:
  • Risk Management Policy
  • Risk Appetite Framework
  • Operational Risk Procedures
  • Incident Reporting Procedures
  • Risk Assessment Methodologies
• Ensure periodic review and approval of risk-related policies.

Business Continuity & Crisis Management

• Support business continuity planning (BCP).
• Participate in disaster recovery and crisis response exercises.
• Assess operational resilience risks.

Training & Awareness

• Conduct risk awareness sessions for employees.
• Promote risk culture throughout the organization.
• Advice department heads on risk mitigation strategies.

Education

• Bachelor’s degree in:
  • Finance
  • Economics
  • Accounting
  • Business Administration
  • Risk Management
  • Related field

A master’s degree is an advantage.

Experience

• Minimum 5 years of relevant experience in:
  • Risk Management
  • Banking
  • Electronic Money Institutions (EMI)
  • Financial Services
  • Microfinance
  • Compliance/Internal Controls

At least 2 years in a supervisory or managerial role preferred.

Preferred Certifications

Preferred professional certifications include:

• FRM (Financial Risk Manager)
• CAMS
• CIA
• CISA
• ISO 31000-related training
• Other relevant certifications

Technical Competencies

• Enterprise Risk Management
• Operational Risk Assessment
• Internal Controls
• Regulatory Compliance
• Fraud Risk Analysis
• Data Analysis & Reporting
• Risk Reporting Frameworks
• Microsoft Office Suite
• Analytical & investigative skills

Behavioral Competencies

• Integrity and professionalism
• Strong analytical thinking
• Confidentiality and ethical conduct
• Leadership and decision-making
• Communication and presentation skills
• Attention to detail
• Problem-solving ability
• Independent judgment

Language Requirements

• Fluency in English
• Fluency in Dari and/or Pashto