Compliance Officer/Data Protection Officer

ASA Microfinance Zambia • Full-time • Lusaka, Zambia • 12h ago

Job Title: Compliance Officer/Data Protection Officer

Reporting Line: Head Risk & Compliance

Main Purpose of the Job

To oversee and manage the ASA Zambia regulatory compliance framework, act as the principal officer for Anti-Money Laundering and Combating the Financing of Terrorism (AML/CFT) and ensure absolute adherence to the Data Protection Act of 2021 across all operations.

Key Responsibilities

1. Regulatory Compliance

· Support the Management team in ensuring the institution complies with all regulatory requirements, licensing obligations, and supervisory expectations set by regulators such as the Bank of Zambia (BOZ), Data Protection Commission (DPC), and Financial Intelligence Centre (FIC).

· Monitor regulatory changes and emerging requirements and provide Management with practical insights into their potential impact on the business, operations, and governance.

· Participate in the institution’s engagement with regulators and supervisory authorities, fostering constructive relationships and maintaining the institution’s regulatory credibility.

· Support the Head Risk & Compliance in the coordination and management of regulatory inspections, reviews, and examinations, ensuring timely remediation of findings and effective closure of all regulatory actions.

2. Financial Crime Compliance

· Serve as ASA Zambia’s Money Laundering Reporting Officer (MLRO).

· Lead AML/CFT/CPF programmes in accordance with the AML/CFT guidelines and applicable regulations.

· Oversee KYC, Customer Due Diligence (CDD), Enhanced Due Diligence (EDD), and screening processes.

· Review, investigate suspicious transactions and file Suspicious Transaction Reports (STRs) with the Financial Intelligence Centre.

· Maintain sanctions, watchlist, and Politically Exposed Persons (PEP) monitor frameworks.

· Conduct and regularly update the institutions ML/TF/PF risk assessments as per regulatory requirements and directives.

3. Compliance Risk Management

· Continually enhance a robust enterprise-wide compliance risk management framework that aligns with the ASA Zambia’s strategic objectives, regulatory obligations, and governance standards.

· Provide effective oversight of the compliance risk landscape through the proactive identification, assessment, monitoring, reporting, and escalation of emerging and existing compliance risks across the institution.

· Conduct Enterprise-wide compliance risk assessments, thematic reviews, and deep-dive evaluations to assess the effectiveness of compliance controls and identify areas requiring enhancement.

· Drive the development and execution of risk mitigation and remediation strategies, ensuring timely resolution of identified issues and sustained compliance with regulatory and internal requirements.

4. Policy and Internal Control Oversight

· Establish and continuously enhance the institution’s compliance policy framework, ensuring alignment with ASA International Group Standards, regulatory expectations, industry best practices, and the ASA S&L’s strategic objectives.

· Monitor and assess adherence to internal policies, corporate governance standards, and regulatory requirements, providing independent assurance on the effectiveness of the control environment.

5. Governance and Reporting

· Provide comprehensive compliance reporting and assurance to Head Risk & Compliance and the Management Team to facilitate effective governance and regulatory oversight.

· Ensure prompt escalation and management of significant compliance incidents, regulatory breaches, and emerging regulatory risks.

· Promote governance, ethics, and conduct risk initiatives that reinforce organizational integrity and regulatory compliance.

6. Training and Compliance Culture

· Development and execution of a comprehensive compliance training and awareness strategy that strengthens regulatory compliance, ethical conduct, and risk management capabilities across the institution.

· Champion a culture of integrity, accountability, and ethical decision-making by embedding compliance expectations into the institution's values, behaviors, and day-to-day operations.

7. Data Privacy Governance

· Develop, implement, and continuously enhance the organization's enterprise-wide data privacy and protection framework, policies, standards, and procedures.

· Serve as the principal liaison with the Data Protection Commission (DPC) and other regulatory authorities on all privacy and data protection matters.

· Conduct Risk Assessments: Data Protection Impact Assessments (DPIAs), and Privacy Impact Assessments (PIAs) for new products, systems, technologies, and third-party arrangements.

Key Performance Measures

Stakeholders:

· Engagements with internal business functions.

· Engagements with regulators such as Bank of Zambia, Financial Intelligence Centre, and Data Protection Commission.

· Employees:

· Effective engagement with staff at all levels

· Employee development through compliance and data protection awareness programs

Risk Management:

· Implementation of effective Compliance Risk mitigation measures.

· Compliance and Reporting:

· Monthly reports submitted to Head Risk & Compliance.

· Existence of an adequate compliance program and data privacy and protection framework.

Strategy:

· Aligning compliance programs with broader organizational objectives.

· Key Skills, Knowledge, Experience and Core Competencies

Key Skills, Knowledge, Experience and Core Competencies

Skills:

· Excellent analytical, problem-solving, and communication skills.

· Good interpersonal skills.

· Good decision-making, problem-solving, and leadership skills.

Knowledge:

· Knowledge of applicable laws, regulations and industry standards.

· Strong knowledge in assessing and managing compliance and regulatory risks.

· Understanding of emerging technologies such as artificial intelligence and data analytics.

Experience and Qualifications:

· Bachelor’s degree in law, Finance, Accounting, Banking, Risk Management, Economics, Business Administration, or a related field.

· Membership in a relevant professional body and possession of one or more of the following certifications:

- Certified Anti-Money Laundering Specialist (CAMS)

- International Compliance Association (ICA) Certification

- Certified Information Privacy Professional (CIPP)

- Certified Information Privacy Manager (CIPM)

· Additional certifications such as CIA, CPA, ACCA, or CISA will be an added advantage.

Core Competencies:

· Ability to collaborate with stakeholders at all levels.

· Ability to work under tight deadlines to meet objectives and Board requirements.

· Demonstrate legal acumen and ability to navigate complex regulatory landscapes.

Important Relationships

· Foster strong relationships with Departmental Heads and functional heads.

· Foster good working relationships with regulatory bodies such as the Bank of Zambia, Financial Intelligence Centre, and the Data Protection Commission.

Problem Solving, Planning and Decision Making

Problem Solving:

· Ability to proactively identify and resolve compliance and regulatory risks.

· Planning:

· Ability to develop compliance action plans and programs.

· Ability to organize work in order of importance and priority.

Decision Making:

· Ability to provide strategic guidance in an objective manner without undue influence.

Application Deadline: 30^th October 2026

Please Note: Only complete applications (cover letter and resume a single document) will be considered, and only shortlisted candidates will be contacted.

We stand for diversity and inclusion. Therefore, we warmly encourage everyone to apply, regardless of gender, background, ethnicity, age, religion, etc.

“ASA Microfinance Zambia limited aims to attract and select a diverse workforce, ensuring equal opportunity to everyone, irrespective race, age, gender, class ethnicity, disability, location, and religion. Qualified women are particularly encouraged to apply”.