Operational Risk Manager - Technology

Permhunt; Makati; On-site; PHP 1,200,000 - 2,000,000; Full time

Job summary

Permhunt is seeking an experienced Technology Risk professional to partner with Technology teams and senior stakeholders to address operational risks, control gaps, and emerging exposures. You will own incident reviews, root cause analyses, and drive sustainable risk mitigation across the organization.

The role also covers leading risk reporting, facilitating risk assessments, delivering training, and supporting both short-term needs and long-term strategic initiatives across business functions.

Qualifications

• 5+ years in Technology Risk, Operational Risk Management, Technology Assurance, or Data Analytics.
• Familiarity with automation, programming, or data analytics solutions; Alteryx, Power BI, and/or SQL are a strong advantage.
• Experience overseeing risk reporting processes and ensuring timely, accurate reports.
• Understanding of Public Cloud environments, particularly IaaS and PaaS, is an advantage.
• Experience in regulated sectors, preferably Financial Services or Healthcare.
• Certifications such as CISA, CRISC, or CISSP are beneficial.

Responsibilities

• Identify and address operational risks, control gaps, and emerging risk exposures; advise on mitigation strategies.
• Lead control assurance activities, facilitate risk assessment sessions, and deliver technology risk awareness training.
• Support short-term operational needs and longer-term strategic priorities across functions.
• Collaborate with Technology stakeholders and audit teams during internal and external audits, including planning, fieldwork, remediation, and closure.

Skills

Technology Risk

Operational Risk Management

Technology Assurance

Data Analytics

Education

CISA

CRISC

CISSP

Tools

Alteryx

Power BI

SQL

Job description

What will you be responsible for?

You will work alongside Technology teams and senior business stakeholders to identify and address operational risks, control gaps, and emerging risk exposures. This includes providing guidance on effective risk mitigation strategies and recommending improvements to strengthen the overall control environment. You will take ownership of operational risk incident reviews, conducting root cause analysis, assessing control failures, and collaborating with stakeholders to develop sustainable solutions that minimize the likelihood of recurrence.

The role will also involve leading control assurance activities, facilitating risk assessment sessions, conducting technology risk awareness and training, and contributing to various risk management initiatives. You will support both short-term operational requirements and longer-term strategic priorities while working across different business functions. Additionally, you will collaborate with Technology stakeholders and audit teams throughout internal and external audit engagements, covering audit planning, fieldwork, issue remediation, and final closure.

What are we looking for?

• 5+ years of experiencein Technology Risk, Operational Risk Management, Technology Assurance, or Data Analytics.
• Familiarity with automation, programming, or data analytics solutions. Exposure to Alteryx, Power BI, and/or SQL would be a strong advantage.
• Experience overseeing risk reporting processes and ensuring reports are delivered accurately and within established timelines.
• Understanding of Public Cloud environments, particularly Infrastructure-as-a-Service (IaaS) and Platform-as-a-Service (PaaS), is an advantage.
• Previous experience working in regulated sectors, preferably Financial Services or Healthcare.
• Relevant industry qualifications such as CISA, CRISC, CISSP, or equivalent certifications are beneficial.
• Excellent analytical and problem-solving capabilities, coupled with strong communication and stakeholder management skills. You should be comfortable presenting recommendations, influencing senior stakeholders, and managing competing priorities in a dynamic, agile environment.