Technology Risk Business Partner

City Savings Bank, Inc.; Pasig; On-site; PHP 1,200,000 - 2,400,000; Full time

Job summary

City Savings Bank, Inc. invites a Technology Risk Business Partner to act as embedded risk advisor across core banking technology, digital channels, payments infrastructure, and IT operations.

You will translate complex risks into business terms for executives, conduct risk assessments, and collaborate with DevOps, Security, and audit teams to ensure regulatory compliance and robust controls.

Qualifications

• Experience advising across core banking tech and payments infrastructure.
• Ability to translate technical risks into business impact for executives.
• Experience with regulatory frameworks and audits for financial institutions.

Responsibilities

• Embed with Engineering Lead and Architects to provide risk guidance on new tech initiatives.
• Translate technical risks into business terms for risk committees.
• Conduct risk assessments on banking architectures and API integrations.
• Partner with DevOps and Security to design automated CI/CD controls.
• Evaluate high-availability, DR, and BCP across payment rails and core platforms.
• Lead post-mortems to identify root causes and remediation plans.
• Ensure compliance with FFIEC, NIST CSF, ISO 27001, PCI-DSS, DORA, SOC 2.
• Support audits and regulatory exams (OCC, Fed, FDIC, central bank).
• Maintain technology risk register and KRIs.
• Promote risk and compliance by design culture.

Skills

Risk governance

Regulatory compliance

Threat modeling

CI/CD security

Incident response

Job description

As the Technology Risk Business Partner (Banking), you will serve as a embedded risk advisor across core banking technology, digital channels, payments infrastructure, and IT operations.

Key Responsibilities

• Embed directly with Engineering Lead, Enterprise Architects, Payments Tech, and Infrastructure teams to provide pragmatic risk guidance on new technology initiatives and system modernizations.
• Translate complex technical risks (e.g., legacy core dependencies, cloud misconfigurations, open-source vulnerabilities) into business impact terms for senior banking executives and risk committees.
• Conduct risk assessments on critical banking architectures, API integrations, core system migrations, and third-party fintech applications.
• Partner with DevOps and Security teams to design automated controls embedded within CI/CD pipelines and deployment workflows.
• Evaluate high-availability setups, disaster recovery (DR), business continuity planning (BCP), and single points of failure across critical payment rails (e.g., SWIFT, ACH, FedNow) and core platforms.
• Participate in major tech incident post-mortems to identify root-cause architectural weaknesses and oversee remediation plans.
• Ensure banking technology systems adhere to regulatory mandates and frameworks (e.g., FFIEC, NIST CSF, ISO 27001, PCI-DSS, DORA, SOC 2).
• Facilitate technical audit readiness, supporting internal audits and regulatory exams (e.g., OCC, Federal Reserve, FDIC, or local central bank).
• Maintain the technology risk register for assigned banking units, tracking Key Risk Indicators (KRIs) such as tech debt impact, unpatched vulnerabilities, and system uptime.
• Champion a proactive culture of "risk and compliance by design" across technology units.