BUSINESS RISK MANAGER, INFORMATION TECHNOLOGY GROUP

Metrobank; Philippines; On-site; PHP 1,000,000 - 1,500,000; Full time

Job summary

A major banking institution in the Philippines is seeking a Business Risk Manager to lead and guide risk management responsibilities across the Information Technology Group. The role involves developing risk responses, conducting quality assessments, and ensuring the implementation of risk management frameworks. The ideal candidate will possess strong skills in risk analysis and a thorough understanding of operational risks in banking. This position offers a significant opportunity for impact in a dynamic financial environment.

Qualifications

• Strong understanding of risk management frameworks and tools.
• Experience in conducting risk assessments and analysis.
• Ability to develop risk responses and mitigation strategies.

Responsibilities

• Lead risk management responsibilities within the business unit.
• Implement and communicate risk management frameworks and benefits.
• Conduct quality risk assessments and identify process gaps.
• Review and manage operational risks within approved tolerances.
• Assist the business unit in developing risk responses, establishing risk mitigating actions and solutions and defining timetables and accountabilities. Ensure that the risk mitigation strategies and processes as approved by the board and senior management are executed.
• Determine the unit’s risk exposures, emerging risks and risks that would have an impact to other business units and communicate to Senior Management
• Regularly review identified key risks , internal controls and operational risk mitigation strategies and processes within the business unit to effectively manage operational risks within approved risk tolerance , and consistent with enterprise – wide policies and procedures established.
• Provide regular risk updates by preparing risk management reports for reporting to various bank level and board level committees articulating significant risk exposures that need immediate attention.
• Intervene and elevate instances when risk management efforts are hampered such as individuals attempting to stifle risk management activities

Skills

risk management

Job description

BUSINESS RISK MANAGER, INFORMATION TECHNOLOGY GROUP

Job Summary

Lead and guide the business line management and personnel in its risk management responsibilities on a day to day basis, specifically identifying, managing and reporting operational risks inherent in the products, activities, processes and systems for which they are accountable.

Specific Duties & Responsibilities

• Direct the implementation of the risk management framework ; communicate its benefits and business value by promoting and spearheading the use of the various risk management tools
• Conduct quality risk assessments and perform deep dive analysis to identify process and control gaps including root causes of risks
• Ensure the business line specific policies, processes, and procedures are adequate and effectively implemented.
• Identify the unit’s risk management training needs and ensure appropriate education is provided
• Assist the business unit in developing risk responses, establishing risk mitigating actions and solutions and defining timetables and accountabilities. Ensure that the risk mitigation strategies and processes as approved by the board and senior management are executed.
• Determine the unit’s risk exposures, emerging risks and risks that would have an impact to other business units and communicate to Senior Management
• Regularly review identified key risks , internal controls and operational risk mitigation strategies and processes within the business unit to effectively manage operational risks within approved risk tolerance , and consistent with enterprise – wide policies and procedures established.
• Provide regular risk updates by preparing risk management reports for reporting to various bank level and board level committees articulating significant risk exposures that need immediate attention.
• Intervene and elevate instances when risk management efforts are hampered such as individuals attempting to stifle risk management activities