Job Description: Information Technology Risk Officer

Vertical: UK Banking / Financial Services
Work Location: Eton Centris, Quezon City, Philippines
Work Arrangement: 100% Onsite
Work Shift: Shifting
Employment Type: Full-Time
Start Date: ASAP
Headcount: 1

Position Overview

We are seeking an experienced Information Technology Risk Officer with a strong background in operational risk management within the BPO or Shared Services industry, preferably supporting banking, financial services, or collections operations.

The successful candidate will oversee first-line operational risks, conduct risk assessments, investigate operational risk events, perform root cause analysis (RCA), and coordinate corrective and preventive action plans. This role requires strong analytical skills, sound judgment, stakeholder management capabilities, and practical knowledge of operational controls, compliance, and quality processes.

Important: This position focuses on operational risk management, not IT infrastructure, cybersecurity, or technical IT risk operations.

Key Responsibilities

• Establish, implement, and monitor policies, procedures, and controls to identify, assess, measure, manage, and report operational risks.

• Conduct operational risk assessments and evaluate control effectiveness across multiple lines of business.

• Investigate operational risk events, identify root causes, document findings, and recommend corrective and preventive actions.

• Develop and track remedial action plans to address identified risks, control gaps, and recurring operational issues.

• Provide oversight to ensure consistent implementation of risk controls and compliance with contractual and internal requirements.

• Monitor operational performance, quality processes, and risk indicators to identify emerging or systemic risks.

• Support investigations involving security incidents, complaints, and Ombuds-related matters, where applicable.

• Maintain strong working relationships with delivery leaders, risk teams, quality teams, compliance stakeholders, and client representatives.

• Provide guidance on the risk management framework, business risk profile, policies, and operational risk decisions.

• Support adherence to applicable standards and control frameworks, including ISO 27001, PCI-DSS, SSAE, HIPAA, and relevant data privacy requirements.

• Participate in location-level crisis management forums, communicate emerging risks, and support appropriate mitigation measures.

• Prepare risk reports, presentations, and management updates using Microsoft Excel, PowerPoint, and other reporting tools.

• Collaborate with leadership to align risk management initiatives with operational efficiency, business priorities, and continuous improvement goals.

Qualifications and Requirements

• Bachelor’s degree or equivalent college graduate qualification.

• At least 5–6 years of relevant experience as a Risk Officer within the BPO, Shared Services, or operations environment.

• Strong hands-on experience in first-line operational risk management, including:

  • Root Cause Analysis (RCA)

  • Operational risk event management

  • Risk assessments and control reviews

  • Corrective and preventive action tracking

  • Risk reporting and mitigation planning

• Good understanding of operational controls, quality processes, compliance requirements, and business risk management frameworks.

• Proficiency in Microsoft Excel and PowerPoint.

• Strong analytical thinking, problem-solving, decision-making, and judgment.

• Excellent communication, influencing, interpersonal, and stakeholder management skills.

• Ability to work across different teams and cultures and manage situations where established procedures may not exist.

• Experience in compliance, security-related activities, or control monitoring is an advantage.

• Exposure to voice operations or collections lines of business is preferred.

• Willingness to work 100% onsite in Eton Centris, Quezon City, on a shifting schedule.

• Available to start as soon as possible.

Preferred Knowledge

• Operational risk management in banking, financial services, or BPO operations.

• Risk and control frameworks and remediation tracking.

• ISO 27001, PCI-DSS, SSAE, HIPAA, and data privacy controls.

• Incident investigation, risk governance, and operational quality assurance.

• Voice or collections operations.

Candidate Screening Criteria

Prioritize candidates with operational risk management experience. Candidates whose backgrounds are primarily in IT infrastructure risk, cybersecurity risk, or technical security operations should not be submitted for this position.

Compensation and Benefits

• Competitive salary package

• Quarterly performance bonus

• HMO coverage from Day 1, including free dependents

Recruitment Process

1. Initial Interview

2. SVAR

3. L2 Interview – Microsoft Teams

4. L3 Interview – Microsoft Teams

Pre-Screening Questions

1. What is your highest educational attainment?

2. How many years of experience do you have as a Risk Officer in the BPO or Shared Services industry?

3. Please describe your experience with operational risk management, including RCA, operational risk events, and risk assessments.

4. What is your last-drawn monthly salary?

5. What is your expected monthly salary?

6. Are you willing to work 100% onsite in Eton Centris, Quezon City, on a shifting schedule?

7. Are you available to start immediately?

Ideal Candidate Profile: An experienced operational risk professional who can identify and assess first-line business risks, investigate incidents, drive remediation, strengthen controls, and partner with operations leadership in a BPO or financial services environment.