IT Risk Assistant Manager (Bank)- Makati - up to 80K

weSource Management Consultancy Firm; Makati; On-site; PHP 812,448 - 973,152; Full time

Job summary

A consulting firm in Makati is seeking an IT Risk Assistant Manager to establish an IT risk management framework aligned with business goals and regulatory standards. The ideal candidate will have over 8 years of experience in IT risk management and cybersecurity, including leadership roles. Responsibilities include developing cybersecurity policies, managing IT-related risks, and leading incident responses. Strong communication and leadership skills are essential. Immediate start preferred.

Qualifications

• 8+ years of experience in IT risk management, cybersecurity, or IT governance.
• At least 4 years in a leadership or managerial role.
• Certifications like CISSP, CISM, CRISC, and CISA are preferred.

Responsibilities

• Establish a robust IT risk management framework aligned with business goals.
• Identify and evaluate IT-related risks, including cybersecurity threats.
• Develop and enforce cybersecurity policies for threat detection and response.
• Lead responses to major IT incidents to minimize impact and ensure recovery.
• Build and mentor an IT risk management team.

Skills

IT risk management

Cybersecurity

Incident management

Data protection

Leadership

Communication skills

Education

Bachelor's degree in Computer Science or IT

Master's Degree

Tools

Risk management frameworks (NIST, ISO 27001, COBIT)

Job description

IT Risk Assistant Manager (Bank)- Makati - up to 80K

Job Openings IT Risk Assistant Manager (Bank)- Makati - up to 80K

About the job IT Risk Assistant Manager (Bank)- Makati - up to 80K

Job Expectations:

• Employment Type: Full-Time; Permanent (Direct Hire)
• Work Schedule: Mondays - Fridays, day shift
• Hiring Process: Paper Screening/Initial Interview - Final Interview

Responsibilities:

• Establish a robust IT risk management framework aligned with business goals, regulatory mandates, and industry standards. Maintain policies and controls to identify, assess, and mitigate IT risks while advising senior management on critical exposures.
• Identify and evaluate IT-related risks, including cybersecurity threats, system failures, and third-party vulnerabilities. Conduct regular risk assessments and maintain risk registers to track and mitigate emerging threats.
• Develop and enforce cybersecurity policies for threat detection, incident response, and data protection. Ensure IT systems remain secure while maintaining compliance with data privacy regulations like GDPR and HIPAA.
• Collaborate with auditors, regulators, and vendors to ensure IT compliance with industry standards. Provide senior management with reports on IT risk status, key indicators, and mitigation efforts.
• Lead responses to major IT incidents, such as cyberattacks and system failures, to minimize impact and ensure recovery. Conduct post-incident reviews to strengthen risk management practices.
• Build and mentor an IT risk management team while coordinating with departments like IT, legal, and compliance. Foster a risk-aware culture through training and awareness programs.
• Assess and manage risks related to technology infrastructure, cloud services, and third-party vendors. Ensure vendor contracts include risk mitigation clauses and monitor compliance with security policies.

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or a related field; a Master's Degree is a big plus.
• 8+ years of experience in IT risk management, cybersecurity, or IT governance, with at least 4 years in a leadership or managerial role
• Expertise in risk assessments, incident management, and regulatory compliance.
• Experience with risk management frameworks (e.g., NIST, ISO 27001, COBIT) and IT governance best practices.
• Strong background in cybersecurity, data protection, and IT infrastructure.
• In-depth knowledge of IT risk management tools and techniques.
• Strong understanding of emerging IT risks, such as cloud computing, AI, and IoT.
• Ability to manage multiple complex projects simultaneously and meet deadlines.
• Excellent leadership, interpersonal, and communication (written and verbal) skills.
• Certifications like CISSP, CISM, CRISC, and CISA are preferred.
• Can start immediately if possible.

***Only shortlisted candidates will be contacted, tailoring CV is recommended***