IT Risk & Control Specialist

Eight Under Par (Pawnshop Operator), Inc.; Philippines; On-site; PHP 600,000 - 1,100,000; Full time

Job summary

Eight Under Par (Pawnshop Operator), Inc. is seeking an IT Risk & Control Specialist to manage IT risk, governance, and privacy programs. You will help ensure regulatory compliance and effective control monitoring across IT services, resilience, and data protection.

The role involves risk assessments, control testing, and collaboration with stakeholders to drive continuous improvement and regulatory alignment. This position is based in the Philippines and is offered as a full-time role.

Qualifications

• Bachelor's Degree in Information Technology, Computer Science, Information Systems, Business Administration, Engineering, or a related field.
• Minimum of 2 years of experience in IT Risk Management, IT Governance, IT Service Management, Compliance, Audit, Information Security, or related functions.
• Experience in banking, financial services, or highly regulated industries is an advantage.

Responsibilities

• Execute and support IT risk management, service management controls, operational resilience, and privacy governance activities.
• Monitor service level performance and compliance with targets; review issues and remediation activities.
• Support Change Advisory Board (CAB) activities and post-implementation reviews; identify control gaps and improvement opportunities.
• Conduct IT risk assessments, business impact analyses, and control self-assessments; track risk mitigation and governance metrics.
• Assist in disaster recovery, contingency planning, and business continuity governance; coordinate testing and remediation.
• Coordinate privacy governance and data protection initiatives; maintain privacy records and reporting.
• Prepare governance reports, dashboards, risk summaries, and compliance updates; communicate with IT teams, auditors, and vendors.
• Support audits, compliance reviews, and documentation; contribute to continuous improvement of processes and controls.

Education

Bachelor's Degree in Information Technology or related field

Job description

Job Description

The IT Risk & Control Specialist is responsible for executing and supporting IT risk management, service management controls, operational resilience, and privacy governance activities. The role helps ensure effective monitoring of IT risks, controls, compliance requirements, and governance processes while supporting regulatory and organizational standards.

Key Responsibilities

IT Service Management Controls

• Monitor service level performance and compliance with agreed targets.
• Review and track service issues, breaches, and remediation activities.
• Monitor change requests, approvals, and change governance requirements.
• Support Change Advisory Board (CAB) activities and post-implementation reviews.
• Identify and elevate control gaps and process improvement opportunities.

IT Risk Assessment & Monitoring

• Conduct IT and information security risk assessments, business impact analyses, and control self-assessments.
• Support project, operational, and third-party risk monitoring activities.
• Monitor risk mitigation plans, key risk indicators (KRIs), and governance metrics.
• Maintain risk registers, documentation, and monitoring reports.
• Prepare risk assessment results, recommendations, and escalation reports.

Disaster Recovery & Business Continuity Support

• Support disaster recovery, contingency planning, and business continuity governance activities.
• Assist in continuity risk assessments, documentation reviews, and testing coordination.
• Monitor recovery plans, controls, testing results, and remediation activities.
• Track compliance with operational resilience and continuity requirements.
• Identify and elevate recovery and continuity gaps.

Privacy Governance & Data Protection

• Support privacy impact assessments and data privacy reviews.
• Monitor privacy controls, compliance requirements, and mitigation actions.
• Maintain privacy governance records and reporting requirements.
• Coordinate with stakeholders on data protection and privacy-related initiatives.

Governance Reporting & Coordination

• Prepare governance reports, dashboards, risk summaries, compliance updates, and presentation materials.
• Track and report key risk indicators and governance metrics.
• Coordinate with IT teams, auditors, vendors, and stakeholders on governance requirements.
• Support governance reviews, meetings, and compliance activities.

Continuous Improvement & Operational Support

• Support governance, risk management, and service management improvement initiatives.
• Participate in audits, compliance reviews, and governance assessments.
• Identify opportunities to improve processes, controls, and documentation.
• Provide general operational and governance support as required.

Qualifications

Education

• Bachelor's Degree in Information Technology, Computer Science, Information Systems, Business Administration, Engineering, or a related field.

Experience

• Minimum of 2 years of experience in IT Risk Management, IT Governance, IT Service Management, Compliance, Audit, Information Security, or related functions.
• Experience in IT risk assessments, governance reporting, audit support, operational risk monitoring, or service management controls.
• Experience in banking, financial services, or highly regulated industries is an advantage.

Required Skills & Knowledge

• IT Governance Frameworks (COBIT, ITIL, ISO Standards)
• IT Risk Management and Operational Risk Concepts
• Risk Assessment Methodologies (ITRA, ISRA, BIA, RCSA)
• Service Level Management and Change Control Processes
• Regulatory Compliance and Audit Coordination
• Disaster Recovery, Contingency Planning, and Business Continuity Management
• Risk Monitoring, KRIs, and Governance Reporting
• Third-Party and Outsourcing Risk Management
• Privacy Governance, Data Privacy, and DPIA Concepts
• Information Security and Control Frameworks
• Policy, Procedure, and Documentation Management
• Strong Analytical and Critical Thinking Skills
• Communication and Stakeholder Management
• Problem-Solving and Decision-Making Skills
• Documentation and Report Writing
• Governance and Compliance Monitoring
• Attention to Detail and Time Management
• Proficiency in Microsoft Office Applications (Excel, Word, PowerPoint)