Beyond compliance: Why risk management must become growth strategy in pension industry

The future of Nigeria’s pension industry will not be determined solely by investment performance or regulatory compliance. It will be determined by how effectively institutions anticipate uncertainty, build resilience, and transform risk into a strategic advantage. Lolade Aiyepola, head, Risk Management, Access ARM Pensions discusses how strategic risks management will drive growth in pension. Modestus Anaesoronye brings the report.

For many years, risk management in Nigeria’s pension industry has largely been viewed through the lens of compliance, an essential function designed to satisfy regulatory requirements, prevent operational failures, and avoid sanctions. This approach has undoubtedly strengthened governance and contributed to the credibility of Nigeria’s Contributory Pension Scheme (CPS), widely regarded as one of Nigeria’s most significant financial sector reforms since the enactment of the Pension Reform Act and its subsequent strengthening under the Pension Reform Act 2014.

Today, however, the industry operates in a far more dynamic environment than it did when the CPS was first introduced. Over the years, pension assets have grown significantly, while millions of Nigerians have been enrolled into the scheme, reflecting increasing confidence in the nation’s retirement savings framework. At the same time, Pension Fund Administrators (PFAs) are navigating rapid technological advancement, evolving customer expectations, cybersecurity threats, economic uncertainty, changing regulatory requirements, and increasing efforts by the National Pension Commission (PenCom) to expand pension coverage through financial inclusion.

These realities demand a broader view of risk management, one that goes beyond protecting institutions from loss to positioning them for sustainable growth.

Risk management should no longer be seen as a back-office control function that simply identifies problems or ensures adherence to policies. Instead, it should become an integral part of business strategy, enabling institutions to make informed decisions, embrace innovation responsibly, and build long term resilience.

This shift requires a fundamental change in mindset. Rather than asking, “How do we avoid risk?” organisations should increasingly ask, “How do we understand and manage risk in ways that create value?” Every strategic decision, whether entering new markets, introducing digital products, improving customer experience, or expanding pension coverage, carries an element of uncertainty. The role of risk management is not to eliminate that uncertainty but to help organisations navigate it with confidence.

Trust remains the most valuable asset in the pension industry. Millions of Nigerians entrust PFAs with safeguarding their retirement savings over several decades, often making pension contributions throughout their working lives without immediate visibility of the benefits. That trust is built gradually through consistent service delivery, sound investment management, operational excellence, and transparency. It can also be weakened by a single operational disruption, cybersecurity incident, data breach, or service failure.

For this reason, effective risk management plays a direct role in protecting institutional reputation and customer confidence. More importantly, it creates value by strengthening governance, improving operational efficiency, enhancing service quality, and reinforcing the confidence that contributors place in the pension system. Institutions that consistently demonstrate resilience during periods of uncertainty are often those that enjoy stronger customer loyalty and greater stakeholder confidence.

Digital transformation further reinforces the need for strategic risk management. Across the industry, PFAs continue to invest in digital onboarding platforms, mobile applications, self-service channels, automation, and data driven customer engagement. These innovations are improving accessibility and convenience for contributors while creating opportunities to reach previously underserved populations.

However, every technological advancement introduces new risks. Cybersecurity threats continue to evolve in sophistication, digital fraud is becoming increasingly complex, and greater reliance on technology creates new operational vulnerabilities. As institutions embrace artificial intelligence, automation, cloud computing, and advanced data analytics, risk management must evolve alongside these innovations.

Importantly, a mature risk management framework should never be viewed as an obstacle to innovation. On the contrary, it provides the structure that allows innovation to flourish responsibly. When risk professionals are involved from the earliest stages of product development and technology implementation, organisations are better positioned to identify emerging threats, strengthen controls, and deploy solutions that are both innovative and secure.

The pace of regulatory and market evolution further reinforces this need. PenCom continues to introduce reforms aimed at strengthening governance, improving operational efficiency, broadening investment opportunities, and expanding pension participation. As regulations evolve alongside technology and customer expectations, institutions that embed risk thinking into strategic planning will be better positioned to adapt quickly while maintaining the confidence of contributors and other stakeholders.

The same philosophy applies to investment decision making. The responsibility of risk management is not simply to challenge investment opportunities or focus solely on downside scenarios. Rather, it is to provide balanced, forward-looking insight that enables institutions to pursue sustainable returns while maintaining prudent levels of risk.

In periods of economic volatility, characterised by inflationary pressures, fluctuating interest rates, foreign exchange movements, and evolving market conditions, informed risk intelligence becomes increasingly valuable. It enables investment teams to evaluate changing market dynamics more effectively, assess potential vulnerabilities, and make decisions that align with long term investment objectives. This collaborative approach ultimately strengthens portfolio resilience and contributes to better retirement outcomes for contributors.

As pension funds continue to play a growing role in Nigeria’s economic development, conversations around infrastructure financing, alternative investments, and long-term capital mobilisation will become increasingly important. Navigating these opportunities successfully will require risk functions that are capable of balancing innovation with prudent governance, ensuring that investment decisions remain aligned with fiduciary responsibilities while delivering sustainable value for contributors.

One of the greatest opportunities before the industry today lies in expanding pension coverage. Although the Contributory Pension Scheme has transformed retirement savings in Nigeria, millions of workers, particularly within the informal sector, remain outside the pension system.

Recognising this gap, the Pension Reform Act 2014 created opportunities for broader pension participation, while PenCom’s Personal Pension Plan (PPP) initiative has become a key vehicle for extending retirement security to self-employed individuals and workers in the informal economy. Achieving meaningful pension inclusion, however, requires more than innovative products. It demands robust risk management frameworks capable of supporting sustainable expansion into new customer segments.

As PFAs develop products tailored to these markets, risk professionals should actively contribute to designing solutions that are accessible, resilient, and responsive to the realities of informal sector workers.

Understanding behavioural risks, operational risks, fraud risks, digital adoption challenges, and customer protection considerations will be critical to ensuring these initiatives succeed over the long term.

Equally important is the need to build a stronger risk culture across organisations. Effective risk management should never be confined to a single department. Every employee, regardless of function, contributes to an institution’s risk profile through the decisions they make each day. Whether in customer service, operations, technology, investments, finance, or business development, employees influence how risks emerge, are identified, and ultimately managed.

Creating this culture requires leadership commitment. Boards and executive management must consistently reinforce that managing risk is a shared responsibility rather than the sole responsibility of the Risk or Compliance function. When employees understand that effective risk management supports better decision making rather than slowing business activity, organisations become more agile, resilient, and responsive to change.

Collaboration between business leaders and risk professionals is therefore essential. The most effective risk functions are no longer viewed as policing units that become involved only after decisions have been made. Instead, they serve as strategic advisers who participate early in planning discussions, challenge assumptions constructively, provide independent insight, and help leadership evaluate both opportunities and uncertainties.

This collaborative approach enables organisations to make better informed decisions while balancing innovation with prudent governance. It also encourages a culture where risks are openly discussed, appropriately managed, and integrated into strategic planning rather than treated as obstacles to progress.

Boards and executive management should also reconsider how they measure the success of risk management. Traditionally, success has often been defined by the absence of regulatory breaches, audit findings, or operational incidents. While these remain important indicators, they should not be the only measures of effectiveness.

The true value of risk management can also be seen in stronger customer trust, improved service delivery, enhanced operational resilience, better strategic decisions, successful innovation, and sustainable organisational growth. Institutions that effectively integrate risk intelligence into business planning are often better equipped to anticipate emerging challenges, respond to market changes, and seize new opportunities with confidence.

The Nigerian pension industry has made remarkable progress over the past two decades. From a reform programme designed to restore confidence in retirement savings, it has evolved into one of the country’s most stable and well-regulated financial sectors, safeguarding the retirement aspirations of millions of contributors. Sustaining this progress, however, will require institutions to view risk management differently, not as a function that merely protects against failure, but as one that enables confidence, innovation, and long-term value creation.

Ultimately, compliance may protect a PFAs license, but strategic risk management will determine its ability to grow, innovate, and remain resilient. The institutions that will lead the next phase of the industry’s evolution will not necessarily be those with the fewest compliance breaches, but those that successfully integrate risk intelligence into decision making, product development, customer experience, and long-term business strategy.

In an increasingly uncertain world, risk management is no longer simply about avoiding what could go wrong. It is about creating the confidence to pursue what is possible.