Enterprise Risk Management and Business Continuity Management Analyst

MR DIY Philippines; Manila; On-site; PHP 600,000 - 900,000; Full time

Job summary

MR DIY Philippines is seeking an Enterprise Risk Management and Business Continuity Management Analyst to support the enterprise-wide risk management program by identifying, assessing, and reporting risks across stores, supply chain, finance, and operations.

You will maintain risk registers, develop KRIs and dashboards, and contribute to business continuity planning and crisis preparedness, partnering with cross-functional teams to ensure risk information is accurate and timely.

Qualifications

• Bachelor’s degree in Finance, Accounting, Industrial Engineering, or related field.
• Experience in risk management, internal audit, compliance, analytics, or operations is an advantage.
• Strong analytical skills and proficiency in Excel, Power BI/Tableau, and data analysis tools.
• Good communication and facilitation skills.
• Detail-oriented, organized, and able to handle multiple workstreams simultaneously.
• Certifications such as ISO 31000, CRMA (foundational), or internal audit/risk trainings are a plus but not required.

Responsibilities

• Identify and assess risks across stores, supply chain, finance, operations, technology, and strategic initiatives.
• Coordinate risk profiling sessions with functional teams and store operations to surface risks, issues, and gaps.
• Conduct preliminary assessments, including likelihood-impact scoring, root cause identification, and control evaluation.
• Maintain and update the Corporate Risk Register, ensuring completeness and accuracy.
• Data Gathering & Risk Analysis: Collect and analyze operational and financial data to detect trends, anomalies, and early warning signals.
• Support the maintenance of Key Risk Indicators (KRIs) and risk dashboards.
• Prepare analytical summaries to support decision-making and escalation.
• Monitoring of Risk Mitigation Plans: Track progress of risk mitigation and action plans with business owners.
• Validate completion, verify supporting documentation, and report overdue items to the Risk Manager.
• Coordinate follow-ups with stakeholders to ensure accountability.
• Risk Reporting & Documentation: Prepare regular risk updates, slide decks, and dashboards for management and the Risk Committee.
• Maintain risk-related documentation, including policies, frameworks, SOPs, and training materials.
• Ensure the integrity and version control of all ERM files and records.
• Business Continuity & Crisis Preparedness Support: Assist in maintaining the Business Continuity Plans (BCP) for key functions.
• Support simulation exercises, scenario tests, post-incident reviews, and documentation of lessons learned.
• Stakeholder Coordination & Awareness: Partner with cross-functional teams to collect data, validate risk information, and promote risk awareness.
• Provide administrative and analytical support during risk workshops, committee meetings, and training activities.

Skills

Risk identification

Data analysis

Excel

Power BI

Communication

Education

Bachelor's degree in Finance, Accounting, Industrial Engineering, or related field

Tools

Power BI

Tableau

Job description

About the job Enterprise Risk Management and Business Continuity Management Analyst

Position: Enterprise Risk Management and Business Continuity Management Analyst

Department: Risk Management

Reporting to: Enterprise Risk Management and Business Continuity Management Manager

Job Purpose

Support the enterprise-wide risk management program by executing risk identification, assessment, monitoring, and reporting activities. The role helps ensure that business risks across stores, supply chain, finance, operations, technology, and strategic initiatives are captured, analyzed, and communicated with clarity to management.

Key Responsibilities

• Risk Identification & Assessment
• Coordinate risk profiling sessions with functional teams and store operations to surface emerging risks, issues, and control gaps.
• Conduct preliminary risk assessments, including likelihood-impact scoring, root cause identification, and control evaluation.
• Maintain and update the Corporate Risk Register, ensuring completeness and accuracy.
• Data Gathering & Risk Analysis
• Collect and analyze operational and financial data to detect trends, anomalies, and early warning signals.
• Support the maintenance of Key Risk Indicators (KRIs) and risk dashboards.
• Prepare analytical summaries to support decision-making and escalation.
• Monitoring of Risk Mitigation Plans
• Track progress of risk mitigation and action plans with business owners.
• Validate completion, verify supporting documentation, and report overdue items to the Risk Manager.
• Coordinate follow-ups with stakeholders to ensure accountability.
• Risk Reporting & Documentation
• Prepare regular risk updates, slide decks, and dashboards for management and the Risk Committee.
• Maintain risk-related documentation, including policies, frameworks, SOPs, and training materials.
• Ensure the integrity and version control of all ERM files and records.
• Business Continuity & Crisis Preparedness Support
• Assist in maintaining the Business Continuity Plans (BCP) for key functions.
• Support simulation exercises, scenario tests, post-incident reviews, and documentation of lessons learned.
• Stakeholder Coordination & Awareness
• Partner with cross-functional teams to collect data, validate risk information, and promote risk awareness.
• Provide administrative and analytical support during risk workshops, committee meetings, and training activities.

Qualifications

• Bachelors Degree Finance, Accounting, Industrial Engineering, or related field.
• Experience in risk management, internal audit, compliance, analytics, or operations is an advantage.
• Strong analytical skills and proficiency in Excel, Power BI/Tableau, and data analysis tools.
• Good communication and facilitation skills.
• Detail-oriented, organized, and able to handle multiple workstreams simultaneously.
• Certifications such as ISO 31000, CRMA (foundational), or internal audit/risk trainings are a plus but not required.