Senior Technology Risk & Controls Manager

Permhunt; Makati; On-site; PHP 1,200,000 - 2,000,000; Full time

Job summary

Permhunt is seeking an experienced Technology Risk professional to partner with Technology teams and senior stakeholders to address operational risks, control gaps, and emerging exposures. You will own incident reviews, root cause analyses, and drive sustainable risk mitigation across the organization.

The role also covers leading risk reporting, facilitating risk assessments, delivering training, and supporting both short-term needs and long-term strategic initiatives across business functions.

Qualifications

• 5+ years in Technology Risk, Operational Risk Management, Technology Assurance, or Data Analytics.
• Familiarity with automation, programming, or data analytics solutions; Alteryx, Power BI, and/or SQL are a strong advantage.
• Experience overseeing risk reporting processes and ensuring timely, accurate reports.
• Understanding of Public Cloud environments, particularly IaaS and PaaS, is an advantage.
• Experience in regulated sectors, preferably Financial Services or Healthcare.
• Certifications such as CISA, CRISC, or CISSP are beneficial.

Responsibilities

• Identify and address operational risks, control gaps, and emerging risk exposures; advise on mitigation strategies.
• Lead control assurance activities, facilitate risk assessment sessions, and deliver technology risk awareness training.
• Support short-term operational needs and longer-term strategic priorities across functions.
• Collaborate with Technology stakeholders and audit teams during internal and external audits, including planning, fieldwork, remediation, and closure.

Skills

Technology Risk

Operational Risk Management

Technology Assurance

Data Analytics

Education

CISA

CRISC

CISSP

Tools

Alteryx

Power BI

SQL

Job description

Permhunt is seeking an experienced Technology Risk professional to partner with Technology teams and senior stakeholders to address operational risks, control gaps, and emerging exposures. You will own incident reviews, root cause analyses, and drive sustainable risk mitigation across the organization.

The role also covers leading risk reporting, facilitating risk assessments, delivering training, and supporting both short-term needs and long-term strategic initiatives across business functions.