Chief Risk Officer

MEGA INTERNATIONAL COMMERCIAL BANK CO. LTD.; Makati; On-site; PHP 3,000,000 - 4,200,000; Full time

Job summary

MEGA INTERNATIONAL COMMERCIAL BANK CO. LTD. in Makati seeks an executive to lead risk management, ICAAP, and data privacy programs across the bank. The role oversees risk appetite, regulatory reporting, and resilience planning, ensuring professional governance and independence of CRO/DPO functions.

The successful candidate will drive risk assessments, policy reviews, and strategic planning, coordinating with head office and BSP while maintaining strict privacy compliance.

Qualifications

• The candidate will lead risk management activities across the bank in line with its risk profile.
• Develop and review the Bank’s Risk Appetite Statement and translate into risk limits.
• Lead ICAAP, stress testing, and capital/liquidity risk assessments.
• Coordinate risk reporting to the BSP and other authorities.
• Oversee recovery planning, business continuity, and operational resilience.
• Monitor data privacy compliance and NPC requirements as Data Protection Officer.

Responsibilities

• Lead, implement, and oversee risk management functions and associated processes, tools, systems, and reports.
• Develop and regularly review the Risk Appetite Statement with Division Heads.
• Lead ICAAP, stress testing, and related risk assessments.
• Lead discussions of the Risk Management Committee and ensure proper reporting.
• Assess effects of rate and FX movements on portfolios and oversee material risks.
• Implement Environmental and Social Risk Management per BSP requirements.
• Conduct loan reviews for credit quality and portfolio health.
• Oversee risk assessments for new products, services, and outsourcing.
• Oversee business continuity and operational resilience arrangements.
• Lead Recovery Plan and ensure it is maintained and tested per BSP requirements.
• Coordinate with the Chief Compliance Officer on risk communications and submissions.
• Review and update risk-related policies and provide risk management training.
• Lead preparation of the three-year strategic plan with relevant units.
• As Data Protection Officer, monitor data privacy compliance and NPC issuances; manage DPIAs, data-subject requests, and data breaches; maintain DPO registration; serve as NPC contact.
• Perform other related duties as assigned by Management while preserving CRO/DPO independence.

Job description

1. Lead, implement, and oversee the Bank’s risk management functions in line with its risk profile, including the processes, tools, systems, and reports used toidentify, assess, measure, monitor, manage, and escalation risks.

2. Lead the development and regular review of the Bank’s Risk Appetite Statement (RAS), in consultation with Division Heads and the Head Office Risk ManagementDepartment, andtranslate it intoappropriate risklimits.

3. Lead the Bank’s Internal Capital Adequacy Assessment Process (ICAAP), stress testing, and related capital and liquidity risk assessments.

4. Lead discussions of the Risk Management Committee and ensure that important risk matters, decisions, and actions are properly documented and reported.

5. Assess the effects of interest-rate andforeign-exchangemovements on the Bank’s portfolios and oversee credit, market, liquidity, operational, technology, concentration, and other material risks.

6. Lead the implementation of the Bank’s Environmental and Social Risk Management Systemin accordance withapplicable BSP requirements.

7. Conduct independent and periodic loan reviews to assess credit quality, concentrations, early warning indicators, and the overall condition of the loan portfolio.

8. Oversee risk assessments for new products, services, significant systems, business activities, and material outsourcing arrangements before implementation.

9. Oversee business continuity and operational resilience arrangements, including the identification of critical operations and the management of significant disruptions.

10. Serve as the designated lead owner of the Recovery Plan and ensure that it is prepared,maintained, updated, and testedin accordance withapplicable BSP requirements.

11. Coordinate with the Chief Compliance Officer on risk-related communications, reports, and submissions to the BSP and other relevant authorities.

12. Review and update risk-related policies and procedures when necessary, and conduct appropriate risk management training.

13. Lead the preparation, review, and updating of the Bank’s three-year strategic business plan, in coordination with relevant units.

14. As Data Protection Officer, monitor compliance with data privacy laws and NPC issuances; support privacy-by-design; oversee privacy impact assessments, data-subject requests, and personal data breach management; maintain required DPO registration or accreditation; and serve as the Bank’s contact person with the NPC.

15. Perform other related duties assigned by Management, provided that these do not impair the independence and effectiveness of the CRO/DPO functions