Information Technology Risk Officer

EnterpriseVilla

Philippines, National Capital Region (Metro Manila), Quezon City

On-site · Full-time

Work arrangement: 100% onsite at Eton Centris, Quezon City
Work shift: Shifting
Start date: ASAP

Strong understanding of risk-management controls.
College graduate.
At least 5–6 years of relevant experience as a Risk Officer in the BPO/shared services industry.
Excellent influencing and interpersonal skills.
Proficient in Excel and PowerPoint.
Strong cross-cultural awareness and sensitivity.
Prior experience in compliance and security-related activities preferred.
Strong analytical and creative problem-solving abilities, including identifying alternatives when established procedures may not exist.
Decisive, with the ability to consistently make sound judgments.
Good understanding and hands-on experience in operations and quality processes.
Exposure to Voice/Collections lines of business is a plus.

Establish and support policies, processes, and standards to identify, assess, measure, manage, and report risks, including systemic operational risks; support the development and timely execution of robust remedial action plans.
Provide oversight and ensure consistent implementation of controls across multiple lines of business.
Implement and monitor controls to meet contractual risk requirements and maintain operational effectiveness.
Investigate security incidents and support Ombuds-related investigations as needed.
Build and maintain strong working relationships with key stakeholders in customer organizations, particularly risk functions.
Commit to continuous personal development and skill enhancement.
Serve as a key reference for the risk-management framework and business risk profile, providing guidance and decisions where appropriate.
Enforce policies and procedures to meet ISO 27001 requirements and other applicable standards for existing accounts and proposed solutions for new business.
Maintain a strong understanding of data privacy regulations and controls, including PCI-DSS, SSAE, and HIPAA.
Participate in location crisis-management forums, update delivery leaders on ongoing situations, stay informed about evolving events, and highlight relevant risks.
Align with the Practice Head’s strategic risk-management and operational-efficiency priorities to ensure cohesive execution at the location level.