A Firm to provide organizational risk assessment

BackgroundPathfinder is a global organization that envisions a world that values and invests in leadership, health, and resilience for women and girls. Pathfinder expands access to critical services for women, girls, and their communities, building opportunities for them to thrive. In compliance with all laws and regulations in the US and in all countries where Pathfinder operates, Pathfinder is driven by our country-led leadership and local community partners. Pathfinder brings together a suite of services and programs that enable millions of people to choose their own paths forward. As part of an ongoing proposal, the potential funder requested an independent risk assessment of Pathfinder conducted by a qualified external firm.As part of the risk assessment, the potential funder further requires an independent first-level assessment of Anti-Money Laundering and Countering the Financing of Terrorism (AML/CFT) risks, including the adequacy of related policies, governance arrangements, due-diligence processes, and mitigating controlsObjectives of the Organizational Risk AssessmentThe risk assessment will be carried out across several domains, including but not limited to policy/regulatory, institutional, financial, technical, legal, and operational domains, and considering the program lifecycle (including but not limited to implementation). The assessment will identify key risks and vulnerabilities and outline specific corrective measures needed to prevent, manage, and address identified risks.The assessment shall also include a first-level AML/CFT assessment, to evaluate Pathfinder’s systems and controls to prevent money laundering, terrorist financing, sanctions breaches, and other prohibited practices, in line with funder requirements and internationally recognized standards.Scope of ActivityRisk assessment will include funder “Prohibited Practices” risk assessment and counterparty due diligence in connection with Prohibited Practices (including fraud, corruption, money laundering, terrorist financing, sanctions violations, and other forms of misconduct as defined in the potential donor's Policy on Prohibited Practices) relating to the preparation of the Funding Proposal and the funded activities envisaged.The engagement scope should include the following:* The risk assessment will be carried out in accordance with internationally recognized risk assessment and assurance standards, applying professional judgment and evidence-based methodologies and will include tests and verification procedures as the risk assessment team deems necessary. * Verify that adequate policies, procedures and processes are in place to mitigate risk of non-compliance with funders’ requirements, professional standards, and local law. * Assess organizational internal controls and the overall control environment.Review practices and systems in place for global and local internal audit, compliance and risk management functions.Verify processes in place to ensure funding will be used in accordance with established rules and regulations of Pathfinder and only for purposes for which funds are provided.* Conduct assurance testing those goods, works and services that will be procured in accordance with established Pathfinder and funder rules and procedures. * Conduct assessment of the adequacy and effectiveness of the accounting and internal control system to monitor expenditures and other financial transactions. * Assess overall risk in context of implementing the program for the potential funder.Conduct an entry and exit meeting with Pathfinder Management.* Develop a comprehensive Risk Mitigation Framework which includes partner due diligence and Pathfinder capacity.In addition to the overall organizational risk assessment, the engagement shall include a specific first-level AML/CFT (eligibility screening) assessment covering:* Review of AML/CFT-related policies, procedures, and governance arrangements, including assignment of responsibilities. * Review of counterpart due-diligence (KYC / CDD) processes applied to partners, vendors, and other relevant entities. * Review of sanctions screening mechanisms and controls related to prohibited practices * Assessment of financial controls relevant to AML/CFT, including fund flows, segregation of duties, transaction monitoring, and escalation mechanisms. * Identification and assessment of AML/CFT risks, including country, partner, and delivery-modality risks. * Identification of key gaps and vulnerabilities and recommendation of mitigation measures.Methodology & Reporting* Specific methodology for AML/CFT and eligibility screening assessment, including document review, interviews with relevant staff, review of systems, and sample testing of transactions and due-diligence files. * Confirmation that this will be an objective and evidence-based assessment. * Main sources of evidence, and methods for collecting this, including whether there are recent quality assurance reviews that may be relied on for evidence. * Description of the size of and methodology for sampling relevant records, transactions, contracts, and management documentation files for review (independent decision by assessment team, random sample, stratification, etc.) * Any confidentiality issues and arrangements.Deliverables* Comprehensive Risk Mitigation Framework Report with recommendations for improvement where applicable. The report shall include an executive summary, detailed findings by risk domain, a risk rating matrix, and a prioritized set of recommendations with proposed Comprehensive Risk Mitigation Framework Report, including executive summary; detailed findings by risk domain; risk rating matrix; prioritized recommendations and mitigation measures. * First-level AML/CFT Assessment, included as a dedicated section or annex, including AML/CFT risk exposure summary; identified policy, governance, and control gaps; recommended AML/CFT mitigation measures; suitable for inclusion as supporting documentation to a funding proposal.Risk Assessment Team and Involvement of Stakeholders in the Assessment* Identification of the team leader, and confirmation that the team leader has the necessary skills. * Demonstrated experience conducting AML/CFT and counterparty due-diligence assessments, preferably for international organizations and/or donor-funded programs. * Experience and qualifications of the members of the assessment team (demonstrate that the team collectively has sufficient knowledge of operational/financial risk assessment and the INGO sector. * Description of the resources available to the assessment team (approximate no. of days, full time/part time work). * Identification of key stakeholders for the assessment and what input is requested from them, including interviews with external stakeholders as part of the assessment. * Identification of focal point in Pathfinder, responsible for facilitating data collection and process. The Pathfinder Sr. Director of Internal Audit & Compliance can serve in this capacity.TermsPathfinder reserves the right to cancel this solicitation at any point and is under no obligation to issue a subcontract because of this solicitation.Pathfinder will not reimburse any expenses related to the preparation of any proposal-related materials or delivery.Timeline & MilestonesPlanning Phase- Timeline (One week)Milestones/Deliverables* Identification of Risk Assessment Team * Discussion and agreement of TOR * Prepare background document request and interview schedule. * Receive requested documentation * Set up interviews. * Conduct entry meeting for Leadership.Implementation Phase- Timeline (Two weeks)Milestones/Deliverables* Review of background documentation, * Sampling of Assessment files for review. * Field work (interviews, document analysis, review of sample Assessment files). * Discussion(s) with Pathfinder Leadership on assessment process and preliminary findings. * Write up on summary of results. * Documentation of evidence collected for assessment.Reporting Phase- Timeline (One week)Milestones/Deliverables* Conduct exit meeting with Pathfinder Leadership. * Draft report sections. * Quality control within team. * Prepare draft report. * Share draft with Pathfinder for preliminary review. * Incorporate any necessary corrections or revisions. * Provide finalized Risk Framework Report with applicable observations and recommendations.SELECTION/EVALUATION CRITERIAIn evaluating the proposals, Pathfinder International will seek the best value for money rather than the lowest priced proposal.* Demonstrated experience conducting AML/CFT and counterparty due-diligence assessments, preferably for international organizations and/or donor-funded programs- 40% * Experience and qualifications of the members of the assessment team- 40% * Financial- 20%HOW TO APPLYGUIDELINES AND INSTRUCTIONSInterested firms or organizations are requested to submit their proposal (Technical and Financial) to [email protected] by February 27, 2026.INQUIRIESIf you have any questions/inquiries, please e-mail [email protected] no later than close of business February 13, 2026DEADLINEAll submissions must be received by Pathfinder no later than 11:59 PM (Washington, D.C. time) on February 27, 2026.Please email information directly to: [email protected] you,Procurement DepartmentPathfinder International