Risk Management Specialist

Main Duties:
Act as an individual contributor within the Risk Management team, responsible for executing risk management activities across assigned Technology and Business domains under the guidance of the Senior/Manager. The role supports the operation of the existing risk management framework and contributes to risk reporting, requiring moderate supervision and guidance from superiors.
Responsibilities:
1. Risk Management activities a. Tech Risk:
Support the identification, analysis, and assessment of operational and technology risks across product development, engineering delivery, infrastructure & security, and data management practices, under the guidance of the Senior/Manager.
Conduct RCSA execution and maintain Risk Profile updates for assigned Tech domains.
Support RCA for incidents, system/security-related losses, and high-impact technology failures within assigned scope.
Monitor and update KRIs and early warning signals relevant to technology risk (e.g. system availability, data integrity, security incidents).
Coordinate with Product, Engineering, Infrastructure & Security, Data stakeholders on routine risk matters within assigned scope.
b. Ops Risk (Operations and Vertical):
Identify, analyze, and assess operational risks within Operations and Vertical processes.
Conduct RCSA execution and maintain Risk Profile for assigned Business domains.
Support RCA for major incidents, operational losses, and high-impact complaints within assigned scope.
Monitor and update KRIs and early warning signals for Operations and Vertical.
2. Risk Framework Operation & Continuous Improvement:
Operate the existing Risk Management framework in accordance with approved policies and procedures within assigned scope.
Identify and escalate gaps or inefficiencies in the current framework to the Senior/Manager for further improvements.
Support the implementation of framework enhancements as directed.
Ensure adherence to risk control requirements and internal policies across assigned Tech and Biz domains.
3. Internal Control Monitoring & Reporting:
Maintain and update Risk Profiles, LDC, KRIs, and CAPA tracking within the assigned scope.
Prepare periodic and ad-hoc risk reports for the Senior/Manager.
Support the evaluation of existing controls within assigned Tech and Biz domains and recommend improvements to mitigate risk exposure.
Monitor operational and technology-related activities within assigned scope and escalate risk alerts to the Senior/Manager in a timely manner.
Requirements:
Experience
Minimum 3-5 years of experience in Risk Management, Operational Risk, or Internal Control.
Prior working experience at a platform economy/super-app company is strongly preferred.
Demonstrated exposure to risk management spanning both technology and business/ operations is a plus.
Technical Competencies
Working knowledge of Risk Profile, RCSA, KRIs, and operational risk management practices.
Basic knowledge of technology/IT risk concepts (system architecture basics, infrastructure & security risk, data governance) sufficient to support risk assessment work under guidance.
Basic knowledge of incident management and governance frameworks.
Good analytical skills with the ability to interpret data and identify risk patterns across both Tech and Biz domains.
Soft Skills
Strong problem-solving and critical thinking capability.
Excellent communication skills, with the ability to convey risk findings to relevant stakeholders within assigned scope.
Effective stakeholder management and internal consulting skills across Tech & Biz functions.
Ability to work under moderate guidance and supervision while maintaining strong risk sensitivity & control mindset.
Certifications
CIA (Certified Internal Auditor)/ CRMA (Certification in Risk Management Assurance)/ ISO 31000 Lead Risk is an advantage;
Demonstrate sufficient knowledge of relevant technology and security standards (e.g. ISO/IEC 27001, PCI DSS, NIST CSF, ISO/IEC 27701, ITIL, COBIT, GDPR,...) is a plus.