Risk Analyst

Cullinan Group Inc.; Taguig; On-site; PHP 1,800,000 - 3,000,000; Full time

Benefits offered by this job

Life Insurance

HMO

Maternity & Paternity Leave

Sick Leave

Vacation Leave

Job summary

Cullinan Group Inc. is seeking a seasoned Business Risk Manager, Information, to lead IT risk management for the technology group.

You will guide day-to-day risk activities, report to senior management, and ensure alignment with enterprise risk policies in a busy financial services environment. The role requires at least 10 years in IT risk, strong regulatory knowledge including BSP Circular 1213, and hands-on experience building risk frameworks and KRAs.

Qualifications

• Graduate of a Bachelor's Degree or MBA.
• Must have at least 10 years of progressive experience in IT Risk Management.
• Solid understanding of IT Business and Operations.
• Prior experience creating and leading implementation of the IT Risk Management Framework.
• Experience reviewing and identifying gaps in the IT Risk Management Process and Policies.
• Experience in leading implementation and achievement of KRAs and KPIs within the IT Risk Management unit.
• Strong knowledge of BSP Circular No. 1213 (2025).
• Preferably with IT Risk Management experience in a local bank.
• Must be willing to report in either the Metrobank Center, BGC or Metropark Pasay office, Mondays to Friday.

Responsibilities

• Direct the IT risk management framework implementation; communicate its benefits and business value by promoting and spearheading the use of the various risk management tools
• Conduct quality IT risk assessments and perform deep-dive analyses to identify process and control gaps including root causes of risks
• Ensure the business lines policies, processes, and procedures are adequate and effectively implemented
• Identify the IT Group's risk management training needs and ensure appropriate education is provided
• Assist the IT Group in developing risk responses, establishing risk mitigating actions and solutions and defining timetables and accountabilities
• Ensure that the risk mitigation strategies and processes as approved by the board and senior management are executed
• Determine the IT Group's risk exposures, emerging risks and risks that would have an impact to other business units and communicate to Senior Management
• Regularly review identified IT risks, internal controls and operational risk mitigation strategies and processes within the business unit to effectively manage operational risks within approved risk tolerance, and consistent with enterprise- wide policies and procedures established
• Provide regular IT risk updates by preparing risk management reports for reporting to various bank level and board level committees articulating significant risk exposures that need immediate attention
• Intervene and escalate instances when risk management efforts are hampered such as individuals attempting to stifle risk management activities

Job description

On-site - Taguig >10 Yrs Exp Bachelor Full-time

Chat

Apply

Share

Job Description

Government Mandated Benefits

Insurance Health & Wellness

Life Insurance, HMO

Maternity & Paternity Leave, Sick Leave, Solo Parent Leave, Vacation Leave

Position Title: BUSINESS RISK MANAGER, INFORMATION

TECHNOLOGY GROUP

Employment Type: Full-time Employment

Work Setup: Full on-site

Work Arrangement: Monday to Friday | 8:00 AM to 5:00 PM

Job Summary:

Leadandguidebusiness line management and personnel in their day-to-day risk management responsibilities, specifically identifying, managing, and reporting operational risks inherent in the products, activities, processes,andsystemsforwhichtheyareaccountable.

Key Responsibilities

• DirecttheimplementationoftheITriskmanagementframework;communicateitsbenefitsandbusinessvaluebypromotingandspearheadingtheuseofthevariousriskmanagementtools
• ConductqualityITriskassessmentsandperformdeepdiveanalysistoidentifyprocessandcontrolgapsincludingrootcausesofrisks
• Ensurethebusinesslinespecificpolicies,processes,andproceduresareadequateandeffectivelyimplemented
• IdentifytheITGroupsriskmanagementtrainingneedsandensureappropriateeducationisprovided
• AssisttheITGroupindevelopingriskresponses,establishingriskmitigatingactionsandsolutionsanddefiningtimetablesandaccountabilities
• Ensurethattheriskmitigationstrategiesandprocessesasapprovedbytheboardandseniormanagementareexecuted
• DeterminetheITGroupsriskexposures,emergingrisksandrisksthatwouldhaveanimpacttootherbusinessunitsandcommunicatetoSeniorManagement
• RegularlyreviewidentifiedkeyITrisks,internalcontrolsandoperationalriskmitigationstrategiesandprocesseswithinthebusinessunittoeffectivelymanageoperationalriskswithinapprovedrisktolerance,andconsistentwithenterprise- widepoliciesandproceduresestablished
• ProvideregularITriskupdatesbypreparingriskmanagementreportsforreportingtovariousbanklevelandboardlevelcommitteesarticulatingsignificantriskexposuresthatneedimmediateattention
• Interveneandescalateinstanceswhenriskmanagementeffortsarehamperedsuchasindividualsattemptingtostifleriskmanagementactivities

Role Exposure:

• Opportunity to influence enterprise-wide risk strategies and decision-making
• High visibility role with regular engagement with Senior Leaders and Board
• Exposure to emerging IT risks, regulatory requirements (e.g., BSP Circular No. 1213), and digital innovations
• Leadership in driving risk culture, governance, and operational resilience across the organization
• Cross-functional collaboration with IT, business units, and compliance teams
• Platform to strengthen expertise in risk frameworks, controls, and strategic risk

Qualifications:

• GraduateofaBachelor'sDegreeorMBA
• Musthaveatleast10yearsofprogressiveexperienceinITRiskManagement
• SolidunderstandingofITBusinessandOperations
• PriorexperiencecreatingandleadingimplementationoftheITRiskManagementFramework
• ExperiencereviewingandidentifyinggapsintheITRiskManagementProcessandPolicies
• ExperienceinleadingimplantationandachievementofKRAsandKPIswithintheITRiskManagementunit
• StrongknowledgeofBSPCircularNo.1213(2025)
• PreferablywithITRiskManagementexperienceinalocalbank
• MustbewillingtoreportineithertheMetrobankCenter,BGCorMetroparkPasayoffice,MondaystoFriday.

Some of our features may not work properly on your device.