Enterprise Risk Management Specialist

This position is responsible for supporting the development, implementation, and continuous improvement of risk management strategies and business continuity frameworks. This role involves assisting in risk identification, assessment, and mitigation efforts to enhance organizational resilience. The specialist plays a key role in ensuring preparedness for disruptions by maintaining business continuity and incident management plans, conducting risk analysis, and supporting compliance with regulatory requirements. Key responsibilities include managing and enhancing risk dashboards by integrating data from multiple sources, ensuring accurate and timely updates, and validating inputs with stakeholders. The role also involves performing data analysis to generate performance insights, identify trends, and benchmark results to detect emerging risks.

1. RISK PLANNING

• Implements the Enterprise Risk Management (ERM) framework, policies, guidelines and controls at the BU level
• Executes programs to build risk awareness culture in the organization.
• Facilitates assessment of emerging and existing risks related to the new strategic initiatives as input to Strategic Planning exercise of the BU
• Provides guidance to the Process or Project Owners in identifying, assessing and treating different risks and risk levels and ensuring that proper risk management strategy is instituted to manage risks.
• Leads the validation and effectiveness of Risk Treatments.
• Performs effective post implementation reviews of risk treatments and identifies learning points, provides analysis and communicates them to BU management.
• Design/plan, implements and monitors the execution of the annual Risk Management (RM) program in coordination with top and middle management
• Implements the review and analysis of the risk assessment and the development of risk response in coordination with the process owners
• Monitors and reviews processes to ensure compliance to overall risk management.
• Implements periodic risk challenges to review and validate the risk profiles of the department/process together with the departments or division
• Facilitates periodic risk management review by top management through the presentation of risk heat maps, future risk controls and key risk indicators
• Facilitates the preparation, analysis and reviews of the mid-year and year-end risk reports such as Strategic risk management plan (SRMP), Key Risk indicators (KRI) and consolidated ORMPs and other risk reports
• Designs and implement Enterprise Risk Management (ERM) processes through creation of guidelines, procedures, work instructions and effective platforms/systems
• Acts as the Subject Matter Expert (SME) for Enterprise Risk Management (ERM)

2. BUSINESS CONTINUITY MANAGEMENT

• Implements the Business Continuity Management System (BCMS) framework, policies, guidelines and controls at the BU level
• Implements and monitors the execution of the annual Business Continuity Management (BCM) program in coordination with top and middle management
• Designs, review and develops contingency and business continuity programs through periodic review of Business Impact Analysis (BIA), Business Continuity Strategy (BCS) and Business Continuity Plans (BCP)
• Designs and implements BCP testing and exercises through the preparation of BCP test plans and evaluation reports.
• Acts as the BCM coordinator during occurrence of incidents, BC scenario and crisis who is responsible in coordinating the BC plans to the incident management teams and monitoring the incident
• In-charge of the maintenance of the group's Business Continuity Management System (BCMS) through periodic reviews of the BIA, BCS and BCPs
• Acts as the Subject Matter Expert (SME) for Business Continuity Management (BCM)
• Facilitates the development of the Facility BC plans (BCP) BCP test plans and implementation of drills and testing
• Coordinates and supports facilities in the activation and execution of BCPs.
• Leads the establishment of Business Continuity Management System in all/new facilities which includes gap analysis and coordinations during internal audits
• Leads the team during external audits on Business Continuity Management System to ensure conformance to ISO 22301, effectiveness of processes and continual improvement

3. RISK DATA ANALYTICS & REPORTING

• Manage Risk Dashboards and Reporting Tools – Oversee the integration of data from multiple sources (e.g., insurance trackers, incident logs, BCM test results, risk registers) to maintain accurate, timely, and user-friendly dashboards for management reporting.
• Perform Risk Data Analysis and Benchmarking – Generate actionable insights from risk performance data, conduct trend analysis, and benchmark results to identify recurring risks, emerging threats, and shifts in the organization's risk profile.

4. OTHERS

• Ensures complete delivery of Risk planning and resilience related Operational Readiness Review (ORR) Day 1 essentials (e.g. BCPs, early risk assessment etc.)
• Manages and optimizes Risk planning and resilience  team budget
• Performs other related duties and responsibilities that may be assigned by the TL

Minimum Qualifications:

• At least two (2) years of professional experience in the power industry or any highly industrial business, with relevant experience in risk management.
• Knowledge of Quality Management System (QMS) requirements is an advantage.
• Bachelor's degree in Accounting, Management, Finance, Engineering, or any related course; a Master's degree in Business, Finance, or a related field is an advantage.
• Strong knowledge of Risk Management frameworks and standards such as ISO 31000, ISO 27000, COSO, FM Global, and other risk engineering standards, as well as familiarity with the insurance industry and markets.
• Relevant certifications in Risk Management, Financial Risk Management, Insurance, or Business Continuity Management are preferred (e.g., Risk Management Professional, BCM Practitioner, Project Management Professional (PMP), etc.).
• 1 vacant position available in Makati City