Non-Financial Risk Officer

The Non-Financial Risk Officer supports the Non-Financial Risk Manager in executing the Bank's Non-Financial Risk (NFR) Management Framework. Operating as part of the Second Line of Defense, the role provides analytical support for the identification, assessment, monitoring, and reporting of operational, compliance, IT, reputational, and other non-financial risks across Salmon Bank's business units. The analyst works closely with First Line of Defense (1LOD) process owners and risk officers, and contributes to materials presented to the Risk Oversight Committee (ROC) and Senior Management.

Responsibilities

Assist in conducting risk and control self-assessments (RCSA) for existing and new products, processes, and systems in coordination with 1LOD process owners; Maintain and update the Bank's risk register, ensuring accuracy of risk ratings, control effectiveness assessments, and residual risk exposures; Support the review of new product and process approvals by identifying and documenting key non-financial risks and corresponding controls prior to go-live; Assist in conducting risk assessments for outsourcing arrangements; Track and monitor key risk indicators (KRIs), operational loss events, control exceptions, and near-misses across business units; Prepare periodic risk reports and dashboards for review by the Non-Financial Risk Manager, including materials for the Risk Oversight Committee (ROC); Monitor action plans arising from audit findings, regulatory examinations (BSP), and self-identified risk issues; escalate overdue or unresolved items to the NFR Manager; Support the production of trend analysis and thematic risk reporting to surface emerging risk patterns requiring management attention; Serve as a risk resource for 1LOD business units, providing guidance on risk identification and control design during process changes or new initiatives; Coordinate with business units to collect risk data, validate control documentation, and support risk awareness activities; Participate in cross-functional working groups and project teams as the 2LOD risk representative; Maintain risk management documentation, including risk policies, procedures, risk frameworks, and governance records; Assist in preparing materials for risk committees and governance forums, including ROC reports, management packs, and meeting minutes

Requirements

Bachelor's degree in Business Administration, Finance, Accounting, Economics, Law, Information Technology, or a related field; Minimum 3 years of experience in risk management, internal audit, compliance, or a related function within a bank or financial institution; Working knowledge of the BSP Manual of Regulations for Banks (MORB) and relevant BSP circulars on operational risk, IT risk, and outsourcing; Familiarity with the Data Privacy Act of 2012 (RA 10173) and NPC issuances as they apply to banking operations; Understanding of operational risk frameworks (e.g., RCSA, KRI, loss event management) and internal control concepts; Basic understanding of the Three Lines of Defense model and its application in financial institutions; Strong analytical and critical thinking skills; able to identify risk themes from large data sets or process documentation; Proficient in MS Office (Excel, Word, PowerPoint); Strong written and verbal communication skills; able to prepare clear reports for management and committee consumption; Detail-oriented with strong documentation habits and ability to manage multiple tasks under deadlines; Collaborative and able to build working relationships with diverse business unit stakeholders

Nice to have

Exposure to BSP regulatory requirements and the Philippine banking regulatory environment; Experience supporting risk reporting for senior management or board-level committees