The Lesotho PostBank (LPB)
The Lesotho PostBank (LPB), your only Basotho Bank, invites suitably qualified candidates to apply for the following vacant position:
Job Title: Digital‑Banking Risk Officer (Paterson Grade C2)
Reports to: Enterprise Risk Manager
Department: Risk
Location: Maseru
Job Purpose
To support the Enterprise Risk Manager in executing enterprise‑wide risk management by proactively implementing, strengthening, and embedding the enterprise risk management (ERM) framework within Digital Banking and Information Technology.
The role ensures effective application of the full risk management lifecycle — including risk identification, assessment, response, control, monitoring, and reporting — to safeguard the bank’s digital and technology environments. The incumbent is responsible for enhancing risk maturity, promoting a strong risk culture, and ensuring that digital and IT risks are effectively managed in alignment with regulatory requirements, business objectives, and the bank’s overall risk strategy.
Key Duties and Responsibilities
Information Security Governance & Compliance
- Participates in the implementation and monitors adoption of information security policy and management frameworks.
- Knows, complies, and operationalizes all relevant Central Bank of Lesotho (CBL) regulations relating to information security and data management issues.
- Attends to gaps from Risk Assessments, Internal Audit, or Central Bank of Lesotho (CBL) / Payments Association of Lesotho (PAL).
Digital Banking & IT Risk Management (Advisory, Monitoring & Reporting)
- Generates Digital Banking and IT risk management advisory reports for Management to be able to respond appropriately to mitigate identified risks.
- Delivers information technology risk assessments and guides business managers on the appropriate risk control strategies, while aligning information technology risk strategies with business objectives.
- Continuously monitors incidents reported under each digital channel and IT and suggests corrective action plans to reduce risk and avoid recurrence.
- Coordinates digital channels and IT risk and control self‑assessment, analysis, rating, and provides control recommendations using the established Enterprise Risk Management framework.
- Customizes and implements risk management tools (e.g., Risk and Control Self‑Assessment (RCSA), Key Risk Indicators (KRIs), Loss Events Database, risk appetite).
- Ensures that risk department strategy activities are implemented as planned.
Fraud and Transaction Risk Oversight
- Analyses, monitors, and reports suspicious transactions done through the digital channels.
- Participates and subscribes to fraud awareness groups (e.g., Bankers’ Association of Lesotho – BAL), industry education and networking events to keep abreast of best practices to prevent cyber risk.
- Facilitates digital channels and IT risks awareness campaigns/education for customers.
Access & Credential Risk Oversight
- Independently assess digital channels and IT users’ activity log, log‑in credentials risk changes effected from the branches and departments.
Policy, Process & Control Frameworks
- Participates in the development, periodic review, and implementation of Digital Banking and IT policies, processes and/or procedures.
- Regularly reviews Digital Channels and IT General Controls and maintains constant liaison with other risk cluster departments (Operational Risk, Compliance, and Internal Audit teams).
Incident, Findings & Remediation Management
- Continuously monitors incidents under each digital channel and IT and suggests corrective action plans to reduce risk and avoid recurrence.
- Attends to audit, regulator, and internal risk findings (Enterprise/Operational Risk, Information Security, Internal Audit, CBL, PAL) and drives remediation closure.
Financial Risk and Revenue Protection Oversight
- Plays oversight role on Expected Credit Loss (ECL) calculations and monitors exceptions.
- Assists Digital Banking and IT in minimizing losses and provides oversight over new or changes in Digital Banking pricing implemented.
- Provides oversight on revenue leakage that might occur in Digital Banking Channels.
- Monitors Digital Banking suspense accounts reconciliations.
Stakeholder Engagement and Risk Awareness
- Participates in LPB projects by playing an advisory role.
- Actively participates in risk management sensitization campaigns to staff with focus on inherent and residual risks relating to digital channels and IT.
- Maintains constant liaison with Operational Risk, Compliance, and Internal Audit to strengthen control environment.
Qualifications and Experience
- BSc Computer Science or relevant computer studies qualification.
- A Certificate in Risk Management will be an advantage.
- 3–5 years’ experience in Digital Channels and IT management.
- Experience working with risk frameworks is essential.
- Hands‑on experience with digital channels (internet banking, mobile banking, cards, payments) is an advantage.
Skills & Competencies
Technical Skills
- Risk Management
- Knowledge of Digital Banking channels and IT general control
- Data Analytics and Reporting
Behavioural Competencies
- Analytical
- Persuasive
- Assertiveness
- Good interpersonal skills
- Attention to detail
- Innovative
- Deadline driven
How to Apply
Applications and CVs (including names of three referees), accompanied by certified copies of relevant certificates, should be emailed to:
Closing Date
08th April 2026
Disclaimer: ONLY shortlisted candidates will be contacted.