- Quezon City, National Capital Region, Philippines
- Hybrid
- Manager
- 6+ years
Lead independent second‑line oversight of technology, data, and operational risk within the Governance, Risk and Compliance team.
Responsibilities
- Provide independent second‑line oversight and constructive challenge of first‑line risk assessments, control designs, remediation strategies, risk decisions, and supporting evidence.
- Perform oversight across key risk programs including RCSAs, third‑party risk, initiative and change risk, incidents and reportable events, issue management, risk acceptances, corrective action plans, and BCM/DR.
- Analyze complex technology, data, cybersecurity, cloud, infrastructure, and operational resilience risks to identify gaps, emerging themes, systemic issues, and areas requiring escalation.
- Develop clear, evidence‑based second‑line risk opinions and communicate findings, recommendations, and risk insights to senior leaders and key stakeholders.
- Support the continued evolution of risk oversight through data analysis, automation, continuous monitoring, and emerging technologies such as Generative AI and Agentic AI.
Requirements
- Nice to have: GRC platforms Archer
- Nice to have: ServiceNow
- Nice to have: Fusion
- Nice to have: NIST framework
- Nice to have: ISO framework