IT Risk Management Lead — Enterprise Risk & Controls

Cullinan Group Inc.; Taguig; On-site; PHP 1,800,000 - 3,000,000; Full time

Benefits offered by this job

Life Insurance

HMO

Maternity & Paternity Leave

Sick Leave

Vacation Leave

Job summary

Cullinan Group Inc. is seeking a seasoned Business Risk Manager, Information, to lead IT risk management for the technology group.

You will guide day-to-day risk activities, report to senior management, and ensure alignment with enterprise risk policies in a busy financial services environment. The role requires at least 10 years in IT risk, strong regulatory knowledge including BSP Circular 1213, and hands-on experience building risk frameworks and KRAs.

Qualifications

• Graduate of a Bachelor's Degree or MBA.
• Must have at least 10 years of progressive experience in IT Risk Management.
• Solid understanding of IT Business and Operations.
• Prior experience creating and leading implementation of the IT Risk Management Framework.
• Experience reviewing and identifying gaps in the IT Risk Management Process and Policies.
• Experience in leading implementation and achievement of KRAs and KPIs within the IT Risk Management unit.
• Strong knowledge of BSP Circular No. 1213 (2025).
• Preferably with IT Risk Management experience in a local bank.
• Must be willing to report in either the Metrobank Center, BGC or Metropark Pasay office, Mondays to Friday.

Responsibilities

• Direct the IT risk management framework implementation; communicate its benefits and business value by promoting and spearheading the use of the various risk management tools
• Conduct quality IT risk assessments and perform deep-dive analyses to identify process and control gaps including root causes of risks
• Ensure the business lines policies, processes, and procedures are adequate and effectively implemented
• Identify the IT Group's risk management training needs and ensure appropriate education is provided
• Assist the IT Group in developing risk responses, establishing risk mitigating actions and solutions and defining timetables and accountabilities
• Ensure that the risk mitigation strategies and processes as approved by the board and senior management are executed
• Determine the IT Group's risk exposures, emerging risks and risks that would have an impact to other business units and communicate to Senior Management
• Regularly review identified IT risks, internal controls and operational risk mitigation strategies and processes within the business unit to effectively manage operational risks within approved risk tolerance, and consistent with enterprise- wide policies and procedures established
• Provide regular IT risk updates by preparing risk management reports for reporting to various bank level and board level committees articulating significant risk exposures that need immediate attention
• Intervene and escalate instances when risk management efforts are hampered such as individuals attempting to stifle risk management activities

Job description

Cullinan Group Inc. is seeking a seasoned Business Risk Manager, Information, to lead IT risk management for the technology group.

You will guide day-to-day risk activities, report to senior management, and ensure alignment with enterprise risk policies in a busy financial services environment. The role requires at least 10 years in IT risk, strong regulatory knowledge including BSP Circular 1213, and hands-on experience building risk frameworks and KRAs.