Operational Risk Manager

Skyro; Taguig; Híbrido; PHP 900.000 - 1.500.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work setup in BGC, Taguig

Descripción de la vacante

Skyro is seeking an experienced Operational Risk Manager to oversee risk governance across the organization. You will manage RCSA, incident and loss-event processes, third-party risk, and continuity programs while coordinating with multiple lines of business and executives.

The role requires strong analytical judgment, stakeholder influence, and deep knowledge of BSP-aligned risk practices within a fintech context. Hybrid work in Bonifacio Global City, Taguig is offered.

Formación

• Strong knowledge of operational risk frameworks and governance.
• Hands-on experience with RCSA, incident and loss-event processes.
• Experience in third-party risk, continuity planning and risk reporting.
• Ability to challenge risks and present clear recommendations to senior management.

Responsabilidades

• Maintain ORM policies, procedures and escalation guidance under the Head's framework.
• Provide independent risk advice and escalate material exposure and decisions beyond delegation.
• Coordinate RCSA with business units, challenge risks and track remediation.
• Maintain incident and loss-event registers; review findings and corrective actions.
• Monitor KRIs, prepare reports, and present risk insights to leadership.
• Assess vendors/outsourcing for risk and ensure proper risk treatment and ownership.
• Review business continuity plans and coordinate with stakeholders on recovery efforts.

Conocimientos

Operational risk framework

RCSA

Incident & loss event mgmt

Third-party risk

KRI & reporting

Stakeholder management

Educación

Bachelor's degree in Finance/Accounting/Business/Economics

Descripción del empleo

About the Company:

Skyro is a fast-growing fintech company based in the National Capital Region, Philippines. Our mission is to transform the financial services landscape in the Philippines by offering fair and accessible digital financial products. We aim to provide user-friendly lending solutions and superior customer service to all sections of society, promoting financial inclusion and literacy. Founded in 2022 by a team of visionaries, we have the expertise and resources to build best-in-class consumer-centric fintech products.

Backed by Breeze Ventures, a global fintech company based in Bahrain, our Philippine operations are powered by Advanced Finance Solutions, Inc. and Skyro Lending, Inc., both registered with the Philippine SEC. As we continue to expand, our team members will have the opportunity to contribute their expertise and talents to a promising international company. Join us on our journey to build a sustainable business and make a difference in the lives of millions of customers.

Key Responsibilities:

Operational Risk Policy and Governance

• - Maintain assigned ORM policies, procedures, tools, and escalation guidance under the Head's framework; recommend changes and implement approved improvements.
• - Provide independent risk advice and challenge. Escalate material exposure, disputed ownership, exceptions, and decisions beyond delegation to the Head.

Risk and Control Assessment

• - Coordinate RCSA with business and support units; challenge risks, control effectiveness, evidence, residual exposure, ownership, and treatment.
• - Perform assigned independent control reviews and root-cause analysis. Track gaps and challenge remediation evidence; business owners retain controls and corrective action.

Incident and Loss Event Oversight

• - Maintain the incident and loss-event register; review classification, analyze causes and trends, and prepare reports and escalation for the Head.
• - Review first-line findings, response, and corrective plans. Support independent reviews when assigned; challenge overdue actions and weak closure evidence.

Risk Indicators and Management Reporting

• - Monitor KRIs using validated data; explain threshold breaches, trends, concentrations, and limitations, and elevate material changes promptly.
• - Prepare reports and recommendations for the Head; present when authorized and retain decision and follow-up records.

Third-Party and Product or Process Risk

• - Assess proposed and ongoing vendors and outsourcing for operational dependencies, control evidence, service concerns, and treatment with accountable owners.
• - Review products, services, and material process changes before launch; record recommendations, conditions, and referrals. Authorized owners retain launch approval and risk acceptance.

Business Continuity Risk and Stakeholder Enablement

• - Review business impact analyses, continuity plans, dependencies, and recovery tests with designated owners. Track gaps and report risk to the Head.
• - Provide risk inputs to response exercises when assigned. Designated owners execute business recovery and technical disaster recovery.
• - Coordinate with Compliance, Information Security, Technology, Internal Audit, and business teams. Coach staff on approved risk practices; manage direct reports only when formally assigned.

Job Requirements:

Bachelor's degree in Finance, Accountancy, Business Administration, Economics, or a related field.

At least five years of operational or enterprise risk experience and two to three years in a supervisory or managerial role.

Hands-on RCSA, incident and loss-event, third-party, continuity, change-review, KRI, and senior management reporting experience.

Experience in banking, fintech, or another BSP-supervised financial institution is preferred.

Skills and Competencies:

Strong operational-risk framework knowledge, including relevant Basel principles and ISO 31000 concepts; policy development, control review, root-cause analysis, and escalation skills.

Analytical judgment, accurate reporting, clear written and verbal communication, stakeholder influence, integrity, confidentiality, attention to detail, and independent working discipline.

Familiarity with cloud-based and technology-driven operations. Working knowledge of applicable BSP risk, outsourcing, IT risk, and consumer-protection requirements is preferred.

Certifications and Other Requirements:

No mandatory professional certification is specified. Hybrid work setup in BGC, Taguig.