Business Resilience Operational Risk Officer Technology

Be #InGoodHands with Metrobank!

Here at Metrobank, we don't simply hire employees—we hone future leaders. We provide opportunities that enhance your skills and unlock your talents, helping you evolve into a well-rounded individual. We supply you with all the pieces you need to do your best work, unleashing your full potential to help you secure your future and lead a fulfilling career. And with Metrobank's strong heart for the community, you have the chance to give back and make worthwhile contributions to our nation's economic and social development.

With Metrobank, a meaningful life is within your reach!

Position Title: Business Resilience Risk Officer - Technology

Job Summary:

• Identifies, evaluates, and mitigates technology and operational risks, with primary focus on leading and executing the Risk and Control Self-Assessment (RCSA) framework.
• Perform root cause analysis to identify underlying process, system, people, or control weaknesses contributing to risk events and losses.
• Develop actionable recommendations to address root causes and prevent recurrence of identified issues.

Role Exposure:

• RCSA Facilitation - Lead end-to-end RCSA cycles, process mapping, and risk evaluations across system development cycle, infrastructure, information security & IT operations. Map core processes to identify inherent risks and control points.
• Control Evaluation - Assess the adequacy, design, and operating effectiveness of existing general controls and automated process controls.
• Tracking & Escalation - Collaborate with process owners to define clear, time-bound corrective action plans for identified control gaps or high residual risks. Monitor the implementation status of remediation plans and escalate overdue risks to Senior Management.
• Dashboarding & Reporting - Prepare risk reports, dashboards, and presentation materials for senior leadership.
• Stakeholder Collaboration: Serve as the primary point of contact for internal partners on operational risk frameworks, methodology, and tools.

Qualifications:

• Bachelor’s degree in Information Technology, Computer Science, Information Systems, Business/Risk Management, or related fields.
• Strong familiarity with IT governance frameworks. Good understanding of core IT operational processes, software development life cycle (SDLC), database management, or cloud architecture.
• Minimum of 3 to 5 years relevant experience in Risk Management, IT Audit, Information Security, Technology Governance, Internal Controls Assessment, or related fields.
• Demonstrated experience in risk assessment, control evaluation, root cause analysis, and issue remediation.

Other Details:

Unit: Risk Management Group / Business Resilience Risk Management Division / Technology Risk Department

Location: Metrobank Center, BGC, Taguig City