Enterprise Risk And Intelligence Associate

Chroma Hospitality, Inc.; Muntinlupa; On-site; PHP 600,000 - 1,200,000; Full time

Job summary

Chroma Hospitality, Inc. is seeking a professional to support enterprise risk management, internal control, audit, compliance, and business continuity processes.

You will execute governance, identification, assessment, mitigation, monitoring, and reporting activities according to established frameworks. The role covers risk identification, evaluation, response, and monitoring, along with control documentation and ongoing improvement of processes to ensure regulatory compliance and business

Qualifications

• Bachelor’s degree in business, Accountancy, Finance, Industrial Engineering, Information Systems, Data Analytics, Risk Management is required.
• Strong knowledge of risk management frameworks and internal control processes is essential.
• Experience in risk governance, assessment, mitigation, monitoring, and reporting is preferred.

Responsibilities

• Support establishment and implementation of Risk Management Frameworks and policies.
• Assist in defining risk appetite and tolerance through data analysis and workshops.
• Identify internal and external risks and maintain the enterprise risk register.
• Perform qualitative and quantitative risk assessments and evaluate risk exposure.
• Develop and document risk mitigation plans and control measures; monitor effectiveness.
• Monitor KRIs, risk trends, and conduct periodic risk reviews; prepare risk reports.
• Support design and maintenance of internal control frameworks; perform CSA and document evidence.
• Assist in audit planning, scope, and risk assessment; document findings and remediation actions.
• Monitor regulatory updates; conduct compliance risk assessments and reporting.
• Identify critical services and support development, maintenance, and testing of business continuity plans.

Skills

Risk Management Frameworks

Risk Assessment Techniques

Internal Control Processes

Audit Execution

Risk Monitoring and Reporting

Incident and Issue Management

Compliance and Regulatory Risk

Business Continuity Management

Data Analysis and Reporting Tool

Education

Bachelor’s degree in business, Accountancy, Finance, Industrial Engineering, Information Systems, Data Analytics, Risk Management

Job description

Job Description:

Job Summary

Supports enterprise risk management, internal control, audit, compliance, and business continuity processes by executing risk governance, identification, assessment, mitigation, monitoring, and reporting activities in accordance with established frameworks and procedures.

Duties and Responsibilities

• 1. Risk Governance
  • Support establishment and implementation of Risk Management Framework and policies
  • Assist in defining risk appetite and tolerance through data analysis and workshops
  • Maintain risk governance structure, roles, and responsibilities documentation
• 2. Risk Identification
  • Identify internal and external risks through assessments, workshops, and interviews
  • Maintain and update the enterprise risk register
  • Classify risks based on defined risk categories and validate with stakeholders
• 3. Risk Assessment and Evaluation
  • Perform qualitative and quantitative risk assessments
  • Evaluate likelihood, impact, and overall risk exposure
  • Prioritize risks and develop risk evaluation outputs
• 4. Risk Response and Mitigation
  • Develop and document risk mitigation plans and control measures
  • Support implementation of control activities and process updates
  • Monitor control effectiveness and recommend improvements for identified gaps
• 5. Risk Monitoring and Reporting
  • Monitor key risk indicators (KRIs), thresholds, and risk trends
  • Conduct periodic risk reviews with stakeholders
  • Prepare and present risk reports to management and governance bodies
• 6. Internal Control
  • Support the design and maintenance of internal control frameworks
  • Perform control self-assessments (CSA) and validate supporting evidence
  • Maintain risk-control mapping and control documentation
• 7. Business Controls Audit
  • Support audit planning, scope definition, and risk assessment activities
  • Document processes, identify controls, and assess design effectiveness
  • Execute walkthroughs, control testing, and fieldwork
  • Document findings and track remediation actions
• 8. Incident and Issue Management
  • Record, classify, and monitor incidents based on severity and impact
  • Perform root cause analysis and document findings
  • Develop and track corrective actions until issue resolution
• 9. Compliance and Regulatory Risk
  • Monitor regulatory updates and emerging risks
  • Conduct compliance risk assessments and gap analyses
  • Maintain compliance and risk registers
  • Support execution of compliance audits and reporting
• 10. Business Continuity Management
  • Identify critical services and support business impact analysis activities
  • Assist in development, maintenance, and testing of business continuity plans (BCP)
  • Monitor BCP coverage, documentation, and testing results
  • Support emergency notification and response validation activities

Technical Competencies and Skills

Risk Management Frameworks, Risk Assessment Techniques, Internal Control Processes, Audit Execution, Risk Monitoring and Reporting, Incident and Issue Management, Compliance and Regulatory Risk, Business Continuity Management, Data Analysis and Reporting Tool

Education, Trainings and Licenses Required

Bachelor’s degree in business, Accountancy, Finance, Industrial Engineering, Information Systems, Data Analytics, Risk Management