RISK MANAGEMENT OFFICER

KEY RESPONSIBILITIES A. Enterprise Risk Management  Support implementation and continuous improvement of the company's Enterprise Risk Management framework.  Coordinate risk identification and assessment activities across all departments.  Maintain a comprehensive and updated enterprise risk register.  Ensure each identified risk has a clearly assigned risk owner and mitigation plan.  Monitor risk exposure and changes in the company's risk profile.  Escalate significant and emerging risks to the Head of Internal Control and management.  Support departments in understanding and applying risk-management requirements. B. Risk Identification & Assessment  Conduct periodic risk assessments across departments, products, processes and projects.  Identify operational, financial, strategic, regulatory, technology, fraud and third-party risks.  Evaluate identified risks based on likelihood and potential impact.  Support departments in determining appropriate risk treatment and mitigation measures.  Conduct risk assessments for significant business or operational changes.  Identify emerging risks that may affect HaloPesa's business objectives. C. Risk Register Management  Maintain and regularly update the company risk register.  Record identified risks, risk ratings, controls, owners and mitigation actions.  Follow up risk owners on outstanding mitigation activities.  Review overdue risk-treatment actions and escalate delays.  Ensure closed risks have sufficient evidence demonstrating that agreed actions have been implemented.  Prepare departmental and company-wide risk summaries. D. Key Risk Indicators – KRIs  Develop and maintain Key Risk Indicators for major risk areas.  Establish appropriate thresholds for monitoring risk exposure.  Collect and analyse KRI information from relevant departments.  Identify breaches or negative trends requiring management attention.  Escalate significant KRI breaches.  Continuously review KRIs to ensure they remain relevant to HaloPesa's operations. E. Operational Risk Management  Monitor risks arising from daily business and operational activities.  Review operational incidents, process failures and control weaknesses.  Identify root causes of significant operational incidents.  Recommend preventive and corrective measures.  Maintain an operational loss and incident database where applicable.  Identify recurring incidents and recommend long-term solutions. F. New Products, Projects & Change Risk Assessment  Participate in risk assessments for new products, services, systems and significant projects.  Identify potential risks before implementation or commercial launch.  Ensure material risks have appropriate controls and mitigation measures.  Review major changes to business processes from a risk perspective.  Coordinate with Product, Business, and Technical, Finance, Compliance and other relevant teams.  Follow up risk-related conditions identified during product or project reviews. G. Third-Party & Partner Risk  Support risk assessment of important vendors, service providers and business partners.  Identify financial, operational, compliance, technology and continuity risks arising from third-party relationships.  Monitor high-risk third parties where required.  Work with relevant departments to ensure appropriate mitigation measures are implemented.  Escalate significant third-party risk exposures to management. H. Incident & Loss Event Monitoring  Maintain records of significant operational and risk incidents.  Coordinate investigation and analysis of risk events.  Assess the business impact of identified incidents.  Track corrective actions arising from incidents.  Analyse incident trends and recurring control weaknesses.  Prepare risk incident reports for management. I. Business Continuity Risk  Support assessment of risks that may disrupt critical HaloPesa services.  Participate in Business Continuity and Disaster Recovery risk assessments.  Identify critical business processes and dependencies.  Support periodic testing of business continuity arrangements.  Track identified gaps and corrective actions. J. Risk Reporting  Prepare monthly, quarterly and periodic risk-management reports.  Provide management with clear information on: o Top company risks o Emerging risks o Risk trends o KRI status o Outstanding mitigation actions o Significant incidents  Prepare risk dashboards for management review.  Immediately escalate critical risks requiring urgent management attention Requirements A. EDUCATION  Bachelor's Degree in Risk Management, Finance, Accounting, Business Administration, Economics, Banking or a related field. Professional Qualifications Professional certification in Risk Management, Internal Audit, Compliance or a related field will be an added advantage. B. EXPERIENCE  Professional certification in Risk Management, such as FRM, CRM, or CRMP, will be an added advantage.  Minimum of 2–4 years of relevant experience in risk management, internal control, audit, compliance, banking or financial services.  Experience within mobile money, fintech, telecommunications or banking will be an added advantage.  Experience in risk assessment, risk registers and mitigation tracking is desirable. C. KNOWLEDGE & SKILLS The job holder should have:  Good understanding of enterprise and operational risk management.  Strong risk-identification and assessment skills.  Understanding of internal controls.  Good analytical and problem-solving skills.  Ability to analyses risk trends and incidents.  Strong Excel, reporting and presentation skills.  Good documentation skills.  Strong communication and stakeholder-management skills.  Ability to challenge control weaknesses professionally.  Strong follow-up and deadline-management skills.