Business Resilience Operational Risk Officer (Technology)

Metrobank; Philippines; On-site; PHP 420,000 - 660,000; Full time

Job summary

Metrobank is seeking a Business Resilience Operational Risk Officer (Technology) to identify, evaluate, and mitigate technology and operational risks with emphasis on the RCSA framework. You will perform root cause analysis to uncover weaknesses across processes, systems, and controls, and develop actionable recommendations to prevent recurrence.

You will lead end-to-end RCSA cycles, map core processes, assess control effectiveness, and collaborate with process owners to define corrective

Qualifications

• Bachelor’s degree or higher in IT, CS, IS, or related field.
• Strong familiarity with IT governance frameworks and SDLC.
• Experience in risk assessment, control evaluation, and issue remediation.
• Understanding of database management and cloud architecture is a plus.

Responsibilities

• Identifies, evaluates, and mitigates technology and operational risks, with primary focus on leading and executing the RCSA framework.
• Perform root cause analysis to identify underlying process, system, people, or control weaknesses contributing to risk events and losses.
• Develop actionable recommendations to address root causes and prevent recurrence of identified issues.
• Lead end-to-end RCSA cycles, process mapping, and risk evaluations across system development cycle, infrastructure, information security & IT operations.
• Map core processes to identify inherent risks and control points.
• Assess the adequacy, design, and operating effectiveness of existing general controls and automated process controls.
• Collaborate with process owners to define corrective action plans and monitor remediation.

Skills

Risk Management

IT governance

SDLC

Database management

Cloud architecture

Education

Bachelor’s degree in Information Technology, Computer Science, Information Systems, Business/Risk Management, or related fields

Job description

Business Resilience Operational Risk Officer (Technology)

Be #InGoodHands with Metrobank!

Here at Metrobank, we don't simply hire employees—we hone future leaders. We provide opportunities that enhance your skills and unlock your talents, helping you evolve into a well-rounded individual. We supply you with all the pieces you need to do your best work, unleashing your full potential to help you secure your future and lead a fulfilling career. And with Metrobank's strong heart for the community, you have the chance to give back and make worthwhile contributions to our nation's economic and social development. With Metrobank, a meaningful life is within your reach!

Position Title: Business Resilience Risk Officer - Technology

Job Summary:

• Identifies, evaluates, and mitigates technology and operational risks, with primary focus on leading and executing the Risk and Control Self-Assessment (RCSA) framework.


• Perform root cause analysis to identify underlying process, system, people, or control weaknesses contributing to risk events and losses.


• Develop actionable recommendations to address root causes and prevent recurrence of identified issues.

Role Exposure:

• RCSA Facilitation - Lead end-to-end RCSA cycles, process mapping, and risk evaluations across system development cycle, infrastructure, information security & IT operations. Map core processes to identify inherent risks and control points.


• Control Evaluation - Assess the adequacy, design, and operating effectiveness of existing general controls and automated process controls.


• Tracking & Escalation - Collaborate with process owners to define clear, time-bound corrective action plans for identified control gaps or high residual risks. Monitor the implementation status of remediation plans and elevate overdue risks to Senior Management.


• Dashboarding & Reporting - Prepare risk reports, dashboards, and presentation materials for senior leadership.


• Stakeholder Collaboration: Serve as the primary point of contact for internal partners on operational risk frameworks, methodology, and tools.

Qualifications:

• Bachelor’s degree in Information Technology, Computer Science, Information Systems, Business/Risk Management, or related fields.


• Strong familiarity with IT governance frameworks. Good understanding of core IT operational processes, software development life cycle (SDLC), database management, or cloud architecture.


• Minimum of 3 to 5 years relevant experience in Risk Management, IT Audit, Information Security, Technology Governance, Internal Controls Assessment, or related fields.


• Demonstrated experience in risk assessment, control evaluation, root cause analysis, and issue remediation.

Other Details:

Rank: Junior Officer