GRC Operations Risk & Controls Analyst

Manulife; Manila; Hybrid; PHP 600,000 - 800,000; Full time

Job summary

Manulife is seeking an Operations Control & Governance Analyst to join our GRC team at MBPS. You will manage user access, perform access reviews, controls testing, and remediation to ensure least privilege, SoD, RBAC compliance and audit readiness.

You will collaborate with frontline managers, perform Business Impact Assessments, and work with Canada-based stakeholders to ensure timely closure of corrective actions while maintaining strong security standards.

Qualifications

• Bachelor’s degree in business, Finance, or a related field.
• 3–5 years of experience in operational risk, controls, audit, or business operations.
• Knowledge of control frameworks and risk management methodologies.
• Familiarity with insurance operations is a plus.

Responsibilities

• Conduct end-to-end walkthroughs with Process and Control Owners to evaluate control effectiveness.
• Identify control gaps and translate findings into Corrective Action Plans (CAPs).
• Partner with frontline managers for Business Impact Assessments and mitigation strategies.
• Review and validate evidence with Canada-based stakeholders for timely closure of CAPs.
• Support access governance by reviewing system permissions and ACLs for compliance.
• Flag unusual transaction patterns indicating potential fraud risks.
• Present insights to stakeholders, including senior leadership, with clear communication.

Skills

Operational risk

Controls

Audit

Business operations

Education

Bachelor's degree in business/finance

Tools

Archer

Job description

Manulife is seeking an Operations Control & Governance Analyst to join our GRC team at MBPS. You will manage user access, perform access reviews, controls testing, and remediation to ensure least privilege, SoD, RBAC compliance and audit readiness.

You will collaborate with frontline managers, perform Business Impact Assessments, and work with Canada-based stakeholders to ensure timely closure of corrective actions while maintaining strong security standards.