Risk & Compliance Manager

Public Service Pension Trust Fund (PSPTF) is an Institution that was established in compliance with the Pension Act (CAP 55:02) to oversee the administration of the Public Service Contributory Pension Scheme. The Fund is now inviting applications from suitably qualified Malawians to fill the following vacant positions that exist at the Secretariat Office. The successful candidates shall be appointed on contracts renewable every 3 years upon successful performance.

1. Risk & Compliance Manager

Grade                   : PTF2

Division                          : Risk and Compliance

Location                : Secretariat

Reporting to                   : Principal Officer

Direct Supervisees        : Risk Officer

 : Compliance Officer

PURPOSE OF THE JOB

The Risk & Compliance Manager is responsible for developing, implementing and monitoring the Pension Fund’s Enterprise Risk Management (ERM), compliance and business continuity frameworks. The role safeguards the Fund’s assets, members’ benefits and reputation by embedding sound risk governance, regulatory compliance (including Anti-money Laundering / Countering the Financing of Terrorism), and resilience practices across the organisation.

KEY DUTIES AND RESPONSIBILITIES 

1. Annual Business Planning

• Contributes to the development of short- and long-term Fund strategy with strong risk and compliance integration.
• Develops, reviews and monitors execution of the Risk and Compliance Strategy.
• Aligns the functional business plan with the Fund’s overall strategy.
• Cascades the annual plan into quarterly and monthly deliverables.

1. Risk & Compliance Governance

• Implements an Enterprise Risk Management (ERM) framework aligned to pension industry corporate governance standards.
• Establishes and continuously improves a consistent operating framework for the identification, management, monitoring and reporting of risk and compliance issues.
• Develops and updates risk and compliance policies, procedures and programmes aligned with the Enterprise Risk Management framework and applicable pension regulations.
• Supports engagement with pension regulators, trustees, auditors and industry bodies on risk and compliance matters.
• Establishes a risk champions/coordinators network across the Fund.

1. Compliance and Anti-money Laundering / Countering the Financing of Terrorism Management

• Assists business units in establishing and embedding a culture of compliance.
• Champions and ensures that a culture of compliance with Anti-money Laundering / Countering the Financing of Terrorism requirements is embedded within the Fund.
• Manages the execution of the second line monitoring and assessment programme for Anti-money Laundering /Counter-Terrorism Financing (AML/CTF).
• Improves and maintains Anti-money Laundering /CTF policies and procedures.
• Provides compliance reporting to ensure the completion and proper analysis of suspicious activity reports.
• Ensures detailed and prompt investigation of all Anti-money Laundering /CTF incidents and cases.
• Maintains a proper register of all incidents reported internally and externally.
• Aids in the improvement of tools used to monitor, analyse and report suspicious activity.
• Monitors the performance of the compliance programme on an ongoing basis and takes steps to improve its effectiveness.
• Identifies applicable pension, financial services and Anti-money Laundering / Countering the Financing of Terrorism legislation, regulatory directives, rules and regulations, and analyses their impact on the Fund’s processes, projects and products.
• Ensures internal policies do not contravene current or proposed legislation, regulatory directives, rules and regulations.
• Reports compliance breaches to the Principal Officer and Risk & Compliance Committee on a monthly/quarterly basis.
• Prepares and implements compliance risk management plans covering the Fund’s external and internal compliance universe and assists with the monitoring of that compliance universe.
• Prepares compliance monitoring reports and impact analyses of new laws, directives and regulations affecting the Fund.
• Formulates and implements the Fund’s annual compliance plan.
• Develops and implements compliance risk monitoring tools to assess the adequacy of controls for identified compliance risks and prepares training materials for compliance awareness sessions.
• Prepares and submits regulatory reports to the Registrar of Financial Institutions through the Principal Officer.

1. Risk Management Context and Process

• Defines and communicates the Fund’s risk appetite and tolerance levels.
• Monitors emerging risks and adjusts appetite where necessary.
• Develops and deploys quantitative risk models to assess potential impacts on strategic and funding objectives.
• Conducts strategic and funding-level risk stress testing.
• Assesses financial risks affecting Fund assets, including liquidity, investment and credit risk.
• Coordinates funding and actuarial risk with the actuarial function to improve valuation and pricing accuracy.
• Strengthens internal controls, manages third-party and custodian risks, prevents fraud, and enhances incident response and operational risk stress testing processes.
• Monitors regulatory changes affecting the pension industry and ensures timely updates and implementation.
• Manages complaints reporting.
• Develops and maintains a Fund-wide risk register documenting key risks related to strategy, assets, members’ benefits, products, operations, systems and related processes.

1. Risk & Compliance Reporting and Monitoring

• Implements key risk indicators (KRIs) and key control indicators as early warnings for identified risks.
• Submits integrated risk and compliance reports to the Board through the Principal Officer.
• Coordinates with the Internal Audit function to monitor and report on the resolution of audit recommendations, risk action plans and regulatory findings.
• Reviews the Fund’s internal controls and procedures to mitigate risks and reduce exposure.
• Manages incident and fraud reporting.

1. Business Continuity Management

• Establishes Business Continuity Management (BCM) and Crisis Management governance structures.
• Coordinates Crisis Management Committee meetings.
• Updates BCM and Crisis Management policies.
• Maintains the Business Continuity Plan (BCP), Disaster Recovery Plan (DRP) and Crisis Management Plan (CMP) aligned with ISO standards.
• Tests and reviews BCM/DR frameworks.
• Reports BCM programme status to the Board Risk Committee.

Strategy Execution and Performance Management

• Translates corporate strategy into actionable plans, KPIs and aligned risk-adjusted targets.
• Monitors enterprise performance through integrated dashboards and insights.
• Supports delivery of strategic initiatives.
• Establishes governance frameworks for strategy review, accountability and escalation to the Board.
• Integrates risk and compliance considerations into strategy execution and monitors impact on business objectives.

1. Awareness, Capacity Development and Culture Embedding

• Assesses Fund-wide risk and compliance training needs and develops a formal training programme and competence model with the People and Culture department.
• Conducts Enterprise Risk Framework, Business Continuity Management, compliance and Anti-Money Laundering / Countering the Financing of Terrorism awareness and refresher training.
• Assigns risk and compliance ownership across departments.
• Promotes consistent risk and compliance terminology and awareness.
• Develops, updates and monitors the effectiveness of the Fund’s Enterprise Risk Management framework and related internal branding/themes.

PERSON SPECIFICATIONS

Qualifications and Experience

• A master’s and bachelor’s degree in either accounting Auditing, Accounting, Finance, Risk Management, Business Administration, Law from a reputable university.
• A professional qualification such as Chartered Accountant (CA), CIMA, ACCA, ICAM, Certified Risk Manager, Certified Compliance Professional or equivalent is desirable.
• At least five (5) years’ experience in Audit, Finance, Enterprise Risk Management (ERM) or Compliance, three (3) of which must have been at management level.
• Prior experience within the pension, insurance or broader financial services industry is an added advantage.

Knowledge, Skills and Abilities

• Ability to manage and develop staff.
• Clear verbal and written communication and ability to prepare accurate reports.
• Ability to plan and organise in line with job requirements.
• Ability to analyse and solve work-related problems to achieve correct outcomes.
• Ability to interact, negotiate (where applicable) and achieve targets.
• Leadership skills and the ability to influence a highly collaborative, proactive cross-functional team of risk and compliance coordinators.
• Strong problem-solving and decision-making abilities.
• Analytical and numerical skills, including risk and financial modelling.
• High level of integrity and ethical decision-making.
• Ability to cope under pressure with minimal supervision.
• Good communication and presentation skills.
• Commercial awareness and the ability to understand broad business and pension-industry issues.
• Working knowledge of compliance software, data compilation and regulatory reporting tools.
• Sound understanding of legal practices, policies and procedures, and QA methodologies relevant to risk and compliance.

METHOD OF APPLICATION

candidates who are interested and meet the requirements should send their application packages in PDF format to vacancies@psptf.mw  addressed to: 

The Statutory Manager

Public Service Pension Trust Fund

P.o Box 30146, Lilongwe

Application package should include the following documents:

1. Cover Letter confirming interest and availability
2. Curriculum vitaecontaining application detailed work experience and three traceable referees
3. Soft copies of higher education and professional certificates

The closing date for receiving applications is on 24th September 2026. Please note that Only applications received through vacancies@psptf.mw will be reviewed and all applications sent through any other channel will not be considered.