Institutional Risk Assessment Expert

Background
The Revenue Mobilization, Investment and Trade (REMIT) is a 39-month (2021 – 2025) program funded by the UK's Foreign, Commonwealth and Development Office (FCDO) and is implemented by Adam Smith International (ASI). The program provides technical assistance (TA) to Pakistan with a broader objective to implement reforms for strengthening macroeconomic stability and improving conditions for high and sustained growth, mutual prosperity, job creation, and poverty reduction. The Programme works towards supporting the Government of Pakistan, its relevant ministries, institutions, and departments to strengthen revenue mobilisation reforms/initiatives, address investment environment challenges, facilitate trade and drive competitiveness by reducing trade barriers, and improve the macroeconomic policy and its management.

Over the past year, REMIT's flagship achievement has been the rollout of Compliance Risk Management (CRM), designed to enhance FBR's ability to harness big data, detect non-compliance across taxpayer behaviors, close compliance gaps, and mobilize additional revenues.

Job Summary

We seek two risk assessment experts to carry out an inward-looking review of recently introduced Compliance Risk Management (CRM) system and framework in Federal Board of Revenue. Using IMF and OECD's technical guidance on the subject, the roles will design and run cross-functional workshops across FBR, PRAL and field formations to assess risks in strategy, governance, people, data, ICT, legal/policy, and inter-agency coordination. Findings will be translated into a prioritized, dynamic risk register with clear owners, inherent/residual ratings, timelines, and practical treatment plans. The experts will serve as the bridge between technical teams and senior leadership—turning issues like data quality, model governance, latency, and rule obsolescence into clear, actionable decisions. They will also steward the CRM change log and institutional memory, ensuring all approved mitigations are documented, tracked to closure, and reported to the Revenue Lead REMIT.

Duties and Responsibilities

The key duties and responsibilities of risk experts include:

• Carry out an IRA cycle by designing and facilitating participatory workshops with a cross-functional group of FBR's senior and technical leadership (CRM Wing, PRAL, IT, I & I, Field Formations).

• Conduct a systematic institutional assessment by guiding stakeholders through a comprehensive review of risks related to Strategy & Governance, Human Capital, Data & Analytics, ICT Infrastructure, Legal/Policy Dependencies, and Inter-agency Coordination.

• Translate complex institutional findings into a single, prioritized "dynamic risk register." This involves moving beyond simple identification to assessing inherent and residual risk, defining specific and practical treatment plans, and securing a designated FBR "owner" for each risk to mitigate "Ownership Drift."

• Serve as the critical "translator" between technical teams and senior management, articulating how operational issues (e.g., data quality gaps, system latency) translate into strategic risks for the CRM's effectiveness and FBR's reputation.

• Ensure the IRA provides comprehensive coverage, explicitly assessing the distinct risks of the ML-based corporate system (e.g., model explainability, key-person dependencies) and the rules-based non-corporate system (e.g., rule obsolescence, governance for updates).

• Maintain the institutional memory of risk mitigation, ensuring all approved treatment plans that require system adjustments are meticulously documented in the central CRM Change Log, providing an auditable trail of how the organization is strengthening its internal capacity.