e& Afghanistan is part of e&, a global technology and telecommunications group headquartered in the United Arab Emirates. As one of the leading telecom operators in the region, e& serves millions of customers across the Middle East, Africa, and Asia through its innovative digital and connectivity solutions. In Afghanistan, the company plays an important role in advancing telecommunications services while investing in the growth of local talent. e& Afghanistan is committed to creating opportunities for Afghan professionals through training, skills development, and career advancement, helping build a strong and capable national workforce.

Job Summary

• Recruiter: e& Afghanistan
• Degree: Bachelor's Degree
• Vacancies Number: 1
• Province: Kabul
• Gender: Both
• Experience:⁦ 7+ years
• Deadline: ⁦⁦5 Nov, 2026⁩

Key responsibilities of Manager Enterprise Risk Management (ERM) & Internal Controls Oversight:

• Enterprise Risk Management Leadership: Lead and coordinate enterprise wide risk identification, assessment, evaluation, monitoring, and reporting activities covering strategic, operational, financial, regulatory, compliance, fraud, cybersecurity, technology, business continuity, and reputational risks.
• Risk Assessments & RCSA: Facilitate periodic risk assessments and Risk & Control Self Assessments (RCSA) across all business functions to identify emerging risks, evaluate control effectiveness, and assess residual risk exposure.
• Enterprise Risk Register Maintenance: Maintain and update the Enterprise Risk Register, ensuring significant risks are appropriately documented, assigned to clear risk owners, and supported by mitigation plans.
• Risk Appetite & Indicators Monitoring: Develop, maintain, and monitor risk appetite statements, risk tolerance thresholds, Key Risk Indicators (KRIs), and Key Control Indicators (KCIs), escalating significant breaches to executive management.
• Control Documentation & Review: Facilitate and oversee the documentation and periodic review of risks, controls, control ownership, testing procedures, and remediation plans across critical business processes.
• Internal Controls Testing Program: Coordinate and oversee the annual Internal Controls Review and Testing Program to assess design adequacy and operating effectiveness of key controls.
• Control Deficiency Identification: Identify control deficiencies, process weaknesses, and governance gaps, providing independent recommendations to management to strengthen the control environment.
• Mitigation Action Tracking: Monitor and report on the implementation status of risk mitigation actions, control remediation plans, and recommendations arising from Internal Audit, External Audit, regulatory reviews, and management assessments.
• Executive & Board Reporting: Prepare and present periodic risk and internal control reports to the VP Risk & Assurance, Executive Risk Management Committee (ERMC), and the Audit & Risk Management Committee (ARMC), highlighting key risk exposures, trends, and mitigation progress.
• Cross-Functional Collaboration: Collaborate with Internal Audit, Compliance, Legal, Regulatory Affairs, Information Security, Finance, Technology, HR, and operational units to enhance risk management practices.
• ERMC Committee Secretarial Role: Act as Secretary to the Executive Risk Management Committee (ERMC) chaired by the CEO by coordinating meetings, preparing agendas and risk reports, recording minutes, tracking action items, and ensuring timely closure of agreed actions.
• Regulatory & Compliance Risk Management: Assess and monitor regulatory and compliance risks, coordinating with relevant stakeholders to support adherence to telecommunications regulations, license obligations, corporate policies, and applicable laws.
• Business Continuity & Disaster Recovery Oversight: Provide independent oversight of Business Continuity Management (BCM) and Disaster Recovery (DR) testing exercises, monitoring the implementation of agreed improvement actions.
• Cybersecurity & Technology Risk Integration: Evaluate cybersecurity, information security, data privacy, technology, and network resilience risks in collaboration with technical teams, ensuring proper representation in the Enterprise Risk Register.
• Strategic & Project Risk Advisory: Provide risk advisory support for strategic initiatives, major projects, investments, new product launches, digital transformation programs, and outsourcing arrangements.
• Risk Culture & Awareness: Promote a strong risk aware and control conscious culture across the organization through communication, training programs, awareness initiatives, and stakeholder engagement.
• External Trend Monitoring: Monitor industry developments, emerging risks, geopolitical changes, regulatory updates, and market conditions that may impact organizational objectives.

Job Requirment

• Educational Background:
  • Required: Bachelor degree in Risk Management, Finance, Accounting, Business Administration, Telecommunications, Information Technology, or a closely related discipline.
  • Preferred: Master degree in Risk Management.
• Professional Certifications (Preferred): Certified Risk Management Professional (CRMP), Certification in Risk Management Assurance (CRMA), Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA), Financial Risk Manager (FRM), or ISO 31000 Risk Management Certification.
• Work Experience Requirements:
  • Minimum of 7 years of progressive experience in Enterprise Risk Management, Internal Controls, Compliance, Governance, Risk Advisory, or related fields.
  • Substantial hands on experience in Enterprise Risk Management is essential; experience in internal controls, audit, or compliance serves as complementary.
  • 3 to 5 years of leadership or managerial experience is strongly preferred.
  • Professional background within telecommunications, technology, financial services, or highly regulated sectors is preferred.
  • Demonstrated experience implementing ERM and Internal Control Frameworks, as well as facilitating senior executive and Board level risk committees.
• Technical Competencies: Deep expertise in Enterprise Risk Management (ERM), COSO Internal Control Frameworks, ISO 31000, Governance Risk & Compliance (GRC), RCSA execution, internal controls testing, operational risk, cybersecurity & technology risk, data analytics, and KRI/KCI development.
• Behavioral & Leadership Competencies: Strong strategic thinking, executive stakeholder management, critical analytical reasoning, decision making, public presentation skills, negotiation ability, and a high standard of professional ethics and adaptability.

Submission Guideline

Interested and qualified candidates are invited to submit their application through the official e& Afghanistan recruitment portal.

• Application Portal Link: careers.etisalat.af
• Support & Contact: For further information or assistance regarding the application process, please reach out via WhatsApp at +93 (0) 788 887 363.

Browser Recommendation: Applicants are kindly advised to use the Google Chrome browser for seamless navigation and smooth submission.

Country

Afghanistan

City

Kabul

Submission Email

careers@etisalat.af

Related Jobs