• Develop, maintain, and periodically review the Enterprise Risk Management framework, Risk Management Policy, Risk Appetite Framework, Operational Risk Procedures, Incident Reporting Procedures, and risk assessment methodologies for Etisalat Money.
• Identify and assess operational, financial, strategic, technology, compliance, fraud, reputation, liquidity, and resilience risks across Etisalat Money.
• Maintain Etisalat Money’s risk registers and assessment reports, including risk owners, ratings, mitigation actions, deadlines, and closure status.
• Develop and monitor key risk indicators, approved risk limits, emerging risk trends, breaches, and overdue corrective actions.
• Conduct periodic risk reviews across Etisalat Money departments, challenge control effectiveness, and advise department heads on assessment, mitigation, ownership, and escalation.
• Independently monitor customer-fund safeguarding, the adequacy of funds backing outstanding electronic money, and concentration risks involving partner banks and settlement arrangements.
• Monitor agent and distributor liquidity risks and recommend measures to maintain cash-in and cash-out availability.
• Assess operational vulnerabilities and monitor failed, pending, duplicate, or incorrectly processed transactions, recommending appropriate mitigations.
• Maintain incident and operational loss records, review root causes, assess control weaknesses, and track corrective actions to closure.
• Coordinate risk assessments before implementing new products, services, processes, integrations, system changes, platform upgrades, or change requests.
• Assess risks related to agents, merchants, distributors, vendors, outsourced services, critical technology providers, and other third parties.
• Monitor significant technology and cyber incidents and challenge the adequacy of response, recovery, and corrective measures.
• Coordinate with Compliance on regulatory risk matters and support the assessment and implementation of applicable Da Afghanistan Bank requirements.
• Incorporate AML/CFT risks into the ERM framework and assist with risk-related regulatory reports, responses, commitments, and remediation tracking.
• Assess fraud risks across wallets, payments, agents, merchants, and internal processes, and support preventive and detective control initiatives.
• Coordinate with Internal Audit and Compliance on high-risk findings and remediation while preserving the distinct responsibilities and independence of each function.
• Prepare monthly and quarterly risk reports for BOM and BOS covering significant exposures, KRI breaches, loss events, trends, and mitigation plans.
• Promptly escalate critical risks, material concerns, control failures, and breaches of approved risk limits to relevant management and Board committees.
• Support governance committees with independent risk analysis and recommendations and maintain direct access to the relevant Board committee.
• Recommend risk appetite, tolerances, and limits for approval by the appropriate governance authority and ensure periodic policy and procedure approvals.
• Support business continuity planning and assess the adequacy of disaster recovery, crisis response, and operational recovery arrangements.
• Participate in continuity, disaster recovery, and crisis exercises and track identified gaps and corrective actions.
• Assess operational resilience risks, including system outages, cyber incidents, liquidity disruptions, and partner failures.
• Conduct risk and fraud awareness sessions and promote ethical conduct, timely incident reporting, clear accountability, and a strong risk culture.
• Provide independent monitoring and effective challenge across Etisalat Money, while business departments retain ownership of their risks and operational controls.