IAM & Operations Risk and Controls Analyst

Manulife; Quezon City; Hybrid; PHP 900,000 - 1,300,000; Full time

Job summary

Manulife in the Philippines seeks an Operations Control & Governance Analyst to join the GRC team. You will manage user access, perform access reviews, controls testing, and remediation to ensure least privilege, SoD, RBAC compliance, and audit readiness.

You will engage stakeholders, report risk clearly, support CAP management, and apply IAM knowledge to strengthen governance and controls across processes.

Qualifications

• Bachelor’s degree in business, finance, or related field.
• 3–5 years in operational risk, controls, audit, or business operations.
• Strong understanding of business processes, risks, and control frameworks.
• Experience or exposure to operational risk management methodologies preferred.
• Knowledge of Insurance, Group Benefits, Affinity, or Contact Centre operations is an advantage.
• Familiarity with Archer (risk management tool) is a plus.

Responsibilities

• Conduct end-to-end walkthroughs with Process and Control Owners to evaluate control effectiveness.
• Identify control gaps and translate findings into Corrective Action Plans (CAPs).
• Partner with frontline managers to perform Business Impact Assessments and shape mitigation strategies.
• Work with Canada-based stakeholders to review evidence and ensure timely closure of CAPs.
• Review system permissions, SharePoint sites, and ACLs for strong security and compliance.
• Monitor transaction patterns and flag unusual activities indicating potential fraud risks.
• Present insights and updates to stakeholders, including senior audiences.

Skills

Analytical skills

Communication

Organized

Risk assessment

Critical thinking

Data interpretation

Proactive

Questioning & curiosity

Education

Bachelor’s degree in business/finance or related field

Tools

Archer

Job description

Manulife in the Philippines seeks an Operations Control & Governance Analyst to join the GRC team. You will manage user access, perform access reviews, controls testing, and remediation to ensure least privilege, SoD, RBAC compliance, and audit readiness.

You will engage stakeholders, report risk clearly, support CAP management, and apply IAM knowledge to strengthen governance and controls across processes.