Non-Financial Risk Officer

Salmon Group; Metro Manila; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

Salmon Group in the Philippines seeks a Non-Financial Risk Officer to support the NFR Manager in identifying, assessing, monitoring, and reporting non-financial risks across the bank's units. The role works with 2LOD and 1LOD to bolster risk governance.

A 3-year track record in risk management or compliance, familiarity with BSP MORB and the Data Privacy Act, and strong analytical and communication skills are required.

Qualifications

• Minimum 3 years of experience in risk management, internal audit, or a related function.
• Exposure to BSP regulatory requirements and the Philippine banking environment is a plus.
• Experience supporting risk reporting for senior management or board-level committees is an advantage.
• Understanding of MORB and internal control concepts as applied to banking operations.

Responsibilities

• Assist in risk identification, assessments, and RCSA activities with 1LOD process owners.
• Maintain and update the risk register and monitor risk ratings and residual risk exposures.
• Support risk reporting for ROC and senior management, including trend analysis.
• Collaborate with business units to collect risk data and document controls.

Skills

Analytical thinking

Risk identification

Communication

Documentation

Collaboration

Education

Bachelor's degree

Tools

MS Excel

MS Word

MS PowerPoint

Job description

The Non-Financial Risk Officer supports the Non-Financial Risk Manager in executing the Bank's Non-Financial Risk (NFR) Management Framework. Operating as part of the Second Line of Defense, the role provides analytical support for the identification, assessment, monitoring, and reporting of operational, compliance, IT, reputational, and other non-financial risks across Salmon Bank's business units. The analyst works closely with First Line of Defense (1LOD) process owners and risk officers, and contributes to materials presented to the Risk Oversight Committee (ROC) and Senior Management.

Key Responsibilities

Risk Identification & Assessment

• Assist in conducting risk and control self-assessments (RCSA) for existing and new products, processes, and systems in coordination with 1LOD process owners.

• Maintain and update the Bank's risk register, ensuring accuracy of risk ratings, control effectiveness assessments, and residual risk exposures.

• Support the review of new product and process approvals by identifying and documenting key non-financial risks and corresponding controls prior to go-live.

• Assist in conducting risk assessments for outsourcing arrangements.

Monitoring & Reporting

• Track and monitor key risk indicators (KRIs), operational loss events, control exceptions, and near-misses across business units.

• Prepare periodic risk reports and dashboards for review by the Non-Financial Risk Manager, including materials for the Risk Oversight Committee (ROC).

• Monitor action plans arising from audit findings, regulatory examinations (BSP), and self-identified risk issues; elevate overdue or unresolved items to the NFR Manager.

• Support the production of trend analysis and thematic risk reporting to surface emerging risk patterns requiring management attention.

Business Partnering

• Serve as a risk resource for 1LOD business units, providing guidance on risk identification and control design during process changes or new initiatives.

• Coordinate with business units to collect risk data, validate control documentation, and support risk awareness activities.

• Participate in cross-functional working groups and project teams as the 2LOD risk representative.

Documentation & Governance

• Maintain risk management documentation, including risk policies, procedures, risk frameworks, and governance records.

• Assist in preparing materials for risk committees and governance forums, including ROC reports, management packs, and meeting minutes.

Qualifications

Education

• Bachelor's degree in Business Administration, Finance, Accounting, Economics, Law, Information Technology, or a related field.

Experience

• Minimum 3 years of experience in risk management, internal audit, compliance, or a related function within a bank or financial institution.

• Exposure to BSP regulatory requirements and the Philippine banking regulatory environment is a plus.

• Experience supporting risk reporting for senior management or board-level committees is an advantage.

Knowledge

• Working knowledge of the BSP Manual of Regulations for Banks (MORB) and relevant BSP circulars on operational risk, IT risk, and outsourcing.

• Familiarity with the Data Privacy Act of 2012 (RA 10173) and NPC issuances as they apply to banking operations.

• Understanding of operational risk frameworks (e.g., RCSA, KRI, loss event management) and internal control concepts.

• Basic understanding of the Three Lines of Defense model and its application in financial institutions.

Skills

• Strong analytical and critical thinking skills; able to identify risk themes from large data sets or process documentation.

• Proficient in MS Office (Excel, Word, PowerPoint)

• Strong written and verbal communication skills; able to prepare clear reports for management and committee consumption.

• Detail-oriented with strong documentation habits and ability to manage multiple tasks under deadlines.

• Collaborative and able to build working relationships with diverse business unit stakeholders.