Information Technology Risk Officer

Job Overview

We are seeking an experienced Information Technology Risk Officer to manage first-line operational risks within a UK Banking/Financial Services environment. The ideal candidate will have strong experience in operational risk management, root cause analysis (RCA), operational risk events, risk assessments, control monitoring, and remediation planning within the BPO or Shared Services industry.

Important: This position focuses on operational risk management. Candidates whose experience is primarily in IT risk operations or cybersecurity risk operations should not be submitted. Prioritize candidates with hands-on first-line operational risk experience.

Key Responsibilities

• Establish, implement, and monitor policies, processes, and standards to identify, assess, measure, manage, and report operational risks, including systemic risks.

• Conduct root cause analyses (RCAs), investigate operational risk events, perform risk assessments, and support the implementation of corrective and preventive actions.

• Develop, monitor, and follow up on remedial action plans to address identified risks and control gaps.

• Provide oversight to ensure consistent implementation of risk controls across multiple lines of business.

• Monitor compliance with contractual risk requirements and applicable policies, standards, and procedures.

• Support security incident investigations and Ombuds-related investigations when required.

• Build and maintain effective relationships with client organizations, business leaders, and risk management stakeholders.

• Serve as a key point of reference for the risk management framework and business risk profile, providing guidance and sound risk-related decisions.

• Support compliance with ISO 27001 requirements and relevant standards for existing accounts and proposed business solutions.

• Maintain awareness of data privacy and compliance requirements, including PCI-DSS, SSAE, and HIPAA.

• Participate in location-level crisis management forums, communicate emerging risks, and support business continuity and operational risk responses.

• Collaborate with leadership to align local risk management activities with strategic risk and operational efficiency priorities.

Required Qualifications

• College graduate.

• At least 5–6 years of relevant experience as a Risk Officer within the BPO or Shared Services industry.

• Strong understanding of risk management controls and first-line operational risk management.

• Hands-on experience in root cause analysis, operational risk events, risk assessments, and remediation action plans.

• Good understanding of operations and quality management processes.

• Excellent influencing, interpersonal, and stakeholder management skills.

• Proficiency in Microsoft Excel and PowerPoint.

• Strong analytical, creative problem-solving, and decision-making abilities.

• Cross-cultural awareness and sensitivity.

• Ability to make sound judgments, including when established procedures do not fully address a situation.

Preferred Qualifications

• Prior experience in compliance and security-related activities.

• Exposure to Voice or Collections lines of business.

• Familiarity with ISO 27001, PCI-DSS, SSAE, HIPAA, and applicable data privacy controls.

Work Arrangement

• 100% onsite at Eton Centris, Quezon City.

• Shifting work schedule.

• Immediate availability preferred.

What We Offer

• Competitive salary package.

• Quarterly performance bonus.

• HMO coverage from Day 1, including free dependents.

Recruitment Process

1. Initial Interview

2. SVAR

3. L2 Interview – Microsoft Teams

4. L3 Interview – Microsoft Teams

Application Requirements

Submit an updated CV highlighting operational risk experience, including RCA investigations, operational risk events, risk assessments, control monitoring, and remediation plans.

Strict CV screening instruction: Do not submit candidates whose experience is primarily in IT risk or cybersecurity risk operations. Prioritize operational risk officers with direct, hands-on first-line risk management experience.