Operational Risk Manager

Maya Bank; Manila; On-site; PHP 800,000 - 1,200,000; Full time

Job summary

Maya Bank in Metro Manila is seeking an experienced risk professional to lead Operational Risk Management initiatives and ensure robust incident handling across the enterprise.

You will implement ORM framework, maintain the Loss Event Database, coordinate with Compliance, Legal, Internal Audit, and business units, and support governance reporting, regulatory examinations, and management reporting. The role requires 4–5 years in related fields and familiarity with BSP regulations.

Qualifications

• Bachelor's degree in Accountancy, Finance, Business Management, Information Technology or related disciplines.
• 4 to 5 years of experience in Operational Risk Management, Internal Controls, Risk Governance, Audit, Compliance or related functions within banking, fintech or financial services related environments
• Strong understanding of operational risk frameworks, incident management, RCSA, KRIs, and operational control environments
• Experience working alongside Internal Controls, SOX, Audit, Technology Operations, and Compliance teams
• Familiarity with BSP regulatory expectations and risk governance principles is preferred
• Experience supporting governance committees, regulatory examinations, and enterprise reporting processes to board and senior management is an advantage
• Strong analytical, communication, and stakeholder management skills with the ability to operate in fast-paced and evolving organizations
• Experience with GRC systems, issue management workflows, and risk reporting tools is an advantage

Responsibilities

• Support the implementation of the organization’s Operational Risk Management (ORM) framework aligned with enterprise risk governance objectives
• Strengthen enterprise-wide incident management process including incident classification, escalation, root cause analysis, remediation governance, and reporting
• Establish and enhance operational loss recognition, loss event monitoring, and operational risk reporting mechanism
• Oversee the maintenance and enhancement of the Loss Event Database (LED) and operational risk issue tracking processes
• Coordinate and oversee the governance and escalation of operational incidents requiring referral to the Employee Action Committee (EAC), including cases involving negligence, misconduct, internal fraud, control bypass, policy violations and other employee-related risk events
• Ensure appropriate incident documentation, root cause analysis, evidence consolidation, stakeholder coordination, and governance reporting are conducted to support fair, timely, and consistent case evaluation and disciplinary decision making processes
• Partner with People Group, Compliance, Legal and Internal Audit, and relevant business units to ensure incidents with conduct, ethical, or disciplinary implications are appropriately escalated, tracked, resolved in accordance within organizational policies and governance standards
• Support 1st line teams in embedding operational risk awareness, process governance, and control accountability into day-to-day operations
• Partner closely with Internal Controls and SOX teams in identifying operational risks, evaluating control environments, and supporting the establishment of key controls across critical processes
• Contribute to the enhancement of GRC tooling, operational risk workflows, risk governance automation initiatives
• Support enterprise-wide risk aggregation and reporting initiatives by consolidating operational risk intelligence from incidents, RCSA, audit findings, compliance testing, and control assessments
• Support regulatory examinations, management reporting, and governance committee engagements relating to operational risk matters, more importantly risk incidents
• Support the execution and continuous improvement of the Risk and Control Self-Assessment program (RCSA) across business and support units
• Ensure operational risks, incidents, audit findings, and control deficiencies are appropriately aggregated and escalated into enterprise risk management process
• Support the establishment of meaningful KRIs and monitoring mechanisms that provide actionable early warning signals to management
• Coordinate with Technology Risk, BCM, Operational Resilience, Fraud, Compliance and other governance functions to ensure integrated operational risk oversight

Skills

Operational risk management

Incident management

RCSA and KRIs

Regulatory compliance

Stakeholder management

Communication skills

Governance and control awareness

GRC tooling experience

Education

Bachelor's degree in Accountancy, Finance, Business Management, Information Technology or related disciplines

Tools

GRC systems

Issue tracking workflows

Risk reporting tools

Job description

What You Will Do

Primary Responsibilities:

1. Support the implementation of the organization’s Operational Risk Management (ORM) framework aligned with enterprise risk governance objectives
2. Strengthen enterprise-wide incident management process including incident classification, escalation, root cause analysis, remediation governance, and reporting;
3. Establish and enhance operational loss recognition, loss event monitoring, and operational risk reporting mechanism;
4. Oversee the maintenance and enhancement of the Loss Event Database (LED) and operational risk issue tracking processes;
5. Coordinate and oversee the governance and escalation of operational incidents requiring referral to the Employee Action Committee (EAC), including cases involving negligence, misconduct, internal fraud, control bypass, policy violations and other employee-related risk events;
6. Ensure appropriate incident documentation, root cause analysis, evidence consolidation, stakeholder coordination, and governance reporting are conducted ti support fair, timely, and consistent case evaluation and disciplinary decision making processes;
7. Partner with People Group, Compliance, Legal and Internal Audit, and relevant business units to ensure incidents with conduct, ethical, or disciplinary implications are appropriately escalated, tracked, resolved in accordance within organizational policies and governance standards.
8. Support 1st line teams in embedding operational risk awareness, process governance, and control accountability into day-to-day operations;
9. Partner closely with Internal Controls and SOX teams in identifying operational risks, evaluating control environments, and supporting the establishment of key controls across critical processes;
10. Contribute to the enhancement of GRC tooling, operational risk workflows, risk governance automation initiatives
11. Support enterprise-wide risk aggregation and reporting initiatives by consolidating operational risk intelligence from incidents, RCSA, audit findings, compliance testing, and control assessments;
12. Support regulatory examinations, management reporting, and governance committee engagements relating to operational risk matters, more importantly risk incidents;

Supporting Responsibilities:

1. Support the execution and continuous improvement of the Risk and Control Self-Assessment program (RCSA) across business and support units.
2. Ensure operational risks, incidents, audit findings, and control deficiencies are appropriately aggregated and escalated into enterprise risk management process;
3. Support the establishment of meaningful KRIs and monitoring mechanisms that provide actionable early warning signals to management
4. Coordinate with Technology Risk, BCM, Operational Resilience, Fraud, Compliance and other governance functions to ensure integrated operational risk oversight.

What We Are Looking For

1. Bachelor's degree in Accountancy, Finance, Business Management, Information Technology or related disciplines.
2. 4 to 5 years of experience working in Operational Risk Management, Internal Controls, Risk Governance, Audit, Compliance or related functions within banking, fintech or financial services related environments
3. Strong understanding of operational risk frameworks, incident management, RCSA, KRIs, and operational control environments;
4. Experience working alongside Internal Controls, SOX, Audit, Technology Operations, and Compliance teams;
5. Familiarity with BSP regulatory expectations and risk governance principles is preferred;
6. Experience supporting governance committees, regulatory examinations, and enterprise reporting processes to board and senior management is an advantage;
7. Strong analytical, communication, and stakeholder management skills with the ability to operate in fast-paced and evolving organizations;
8. Experience with GRC systems, issue management workflows, and risk reporting tools is an advantage