Financial and Operational Risk Officer

The Financial and Operational Risk Officer is primarily accountable in managing the overall financial and operational risk of the organization. He/ She will also be expected to provide strong assistance to the Risk Management Head in developing, reviewing, and deploying effective operational risk management framework, high level policies, procedures, and initiatives to ensure that the company's key risks stay within the defined potential loss (i.e., risk appetite), in accordance with the risk-reward policy of the organization

Duties and Responsibilities

A. People Management: Accountable in coaching, developing, and mentoring his/her team members to guarantee proper execution of company policies and procedures.

Responsible in instilling the following values/culture of the team promoted by the company:

• Good record of attendance of each team member
• Well-disciplined team members
• Good behaviors
• Healthy, efficient, and effective work environment

B. Operational Risk Analysis Monitoring

• Leads the analysis and monitoring of operational risks within the company's business units through oversight in the implementation of risk mitigants on the risks identifies on a per business unit based on the accomplished Risk Control and Self-Assessments.
• Reviews operational risk management reports, including breaches to tolerances.
• Ensures that risk assessment is performed on new products, initiatives, procedures, and policies prior to presentation for approval to appropriate authorities

C. Operational Risk Management Tools and Initiatives Deployment and Implementation

• Leads the company-wide deployment and implementation of risk management tools and initiatives, including but not limited to, Business Continuity Management and Information Security Risk Mgt Programs.
• Spearheads the implementation of the following Operational Risk Management Activities:
  • Risk Control and Self-Assessment
  • Call Tree Exercises
  • Business Continuity Plan Review (including BCM Risk Assessment Analysis, Business Impact Analysis, and Internal Recovery Plan)
  • Information Security Risk Assessment
  • Privacy Impact Assessment
  • Review and/or updating of bank-wide User Access Matrices (UAMs) and Access Control Matrices (ACMs)
  • Risk management training and risk awareness programs

D. Operational Risk Management Process Support

• Review and endorses for Bank Risk Officer's concurrence, policies and procedures manuals, product manuals, initiatives, and applicable memoranda prior process owners' presentation to approving body.
• Ensures that policies and procedures manuals of EWRB group operations are aligned with the operational risk management framework.
• Attends Brainstorming Team Meetings related to operations and provides insights on ORM (which includes information security and business continuity).

E. Operational Risk Management Policies and Strategies Alignment to Organization Standard

• Ensures that the bank's operational risk management policies and stategies (including business continuity and information security) are in compliance with applicable regulations, EWB standards, and stategic imperatives of the organization.
• Reviews existing operational risk management policies and procedures as against latest regulatory issuances and/or parent-bank policies and procedures.
• Coordinates with EWB counterparts regarding issues and concerns relating to risk management raised during SLT and BOD meetings.

F. Other Assignments

• Perform other functions and tasks that may be assigned by the immediate head.
• Conducts training and/or risk awareness programs
• Job Qualifications and Competencies Requirement

Qualifications: (Minimum Education, Experience Training)

• Bachelor's degree in Risk Management, Finance, Business Administration, or related field.
• Minimum of 3-5 years of experience in risk management or related roles.
• Strong analytical, problem-solving, and decision-making skills.
• Excellent communication and interpersonal abilities.
• Knowledge of risk management frameworks and regulatory requirements.
• Proficiency in risk assessment tools and software.
• Ability to work independently and collaboratively within a team.
• High level of integrity and confidentiality in handling sensitive information.