Operational Risk Specialist

Overview:

The Operational Risk Specialist provides support in the implementation of the enterprise-wide Operational Risk Management Framework. The role will assist in the identification, measurement, monitoring and reporting operational risk exposure of business/function units.

What you will do:

• Implement and maintain the IT Risk Management Framework in alignment with the Maya PH IT Risk team.
• Conduct risk assessments for Operational and IT processes, third-party vendors, and new products and services rolled out by Maya Bank.
• Identify emerging Operational and IT risks, ensuring appropriate mitigation strategies are in place.
• Develop and maintain Key Risk Indicators (KRIs) to monitor IT-related operational risks.
• Assist in IT risk reporting to senior management and regulatory (i.e. EDRN, RCL, etc.) bodies such as the BSP.
• Spearhead the implementation of ITRA and RCSA for Maya Bank.
• Collaborate with IT and Security teams to strengthen internal controls and minimize vulnerabilities.
• Support the Risk Incident Reporting (RIR) process, analyzing incidents especially IT-related items, assist in identifying root causes and proposing risk mitigation strategies.
• Contribute to Business Continuity and Disaster Recovery planning especially from an IT risk perspective.
• Ensure compliance with BSP regulations, particularly Circular 808 on IT Risk Management and Circular 900 on Operational Risk; and other regulatory memos related to risk management as applicable.
• Support regulatory exams, audits, and internal reviews related to Operational Risk and IT risk.
• Assist in the remediation of IT risk-related audit findings and ensure timely closure of control gaps.
• Conduct IT risk awareness training and workshops for Maya bank employees.
• Promote a risk-aware culture across business and technology teams.
• Stay up to date with industry trends, regulatory developments, and emerging cyber threats.

What we are looking for:

• Bachelor's degree in business or equivalent
• Certification as Risk Analyst or any Operational Risk Course is an advantage
• Must have at least 4-5 years of experience in operational risk management, preferably from banking, financing, lending or FinTech companies