Mô tả công việc
Mô tả công việc
Main Duties:
Act as an individual contributor within the Risk Management team, responsible for executing risk management activities across assigned Technology and Business domains under the guidance of the Senior/Manager. The role supports the operation of the existing risk management framework and contributes to risk reporting, requiring moderate supervision and guidance from superiors.
Responsibilities:
1. Risk Management activities
a. Tech Risk
• Support the identification, analysis, and assessment of operational and technology risks across product development, engineering delivery, infrastructure & security, and data management practices, under the guidance of the Senior/Manager.
• Conduct RCSA execution and maintain Risk Profile updates for assigned Tech domains.
• Support RCA for incidents, system/security-related losses, and high-impact technology failures within assigned scope.
• Monitor and update KRIs and early warning signals relevant to technology risk (e.g. system availability, data integrity, security incidents).
• Coordinate with Product, Engineering, Infrastructure & Security, Data stakeholders on routine risk matters within assigned scope.
b. Ops Risk
• Identify, analyze, and assess operational risks within Operations and Vertical processes.
• Conduct RCSA execution and maintain Risk Profile for assigned Business domains.
• Support RCA for major incidents, operational losses, and high-impact complaints within assigned scope.
• Monitor and update KRIs and early warning signals for Operations and Vertical.
2. Risk Framework Operation & Continuous Improvement
• Operate the existing Risk Management framework in accordance with approved policies and procedures within assigned scope.
• Identify and escalate gaps or inefficiencies in the current framework to the Senior/Manager for further improvements.
• Support the implementation of framework enhancements as directed.
• Ensure adherence to risk control requirements and internal policies across assigned Tech and Biz domains.
3. Internal Control Monitoring & Reporting
• Maintain and update Risk Profiles, LDC, KRIs, and CAPA tracking within the assigned scope.
• Prepare periodic and ad-hoc risk reports for the Senior/Manager.
• Support the evaluation of existing controls within assigned Tech and Biz domains and recommend improvements to mitigate risk exposure.
• Monitor operational and technology-related activities within assigned scope and escalate risk alerts to the Senior/Manager in a timely manner.
Yêu cầu
Yêu cầu công việc
Requirements:
Experience
• Minimum 3-5 years of experience in Risk Management, Operational Risk, or Internal Control.
• Prior working experience at a platform economy/super-app company is strongly preferred.
• Demonstrated exposure to risk management spanning both technology and business/ operations is a plus.
Technical Competencies
• Working knowledge of Risk Profile, RCSA, KRIs, and operational risk management practices.
• Basic knowledge of technology/IT risk concepts (system architecture basics, infrastructure & security risk, data governance) sufficient to support risk assessment work under guidance.
• Basic knowledge of incident management and governance frameworks.
• Good analytical skills with the ability to interpret data and identify risk patterns across both Tech and Biz domains.
Soft Skills
• Strong problem-solving and critical thinking capability.
• Excellent communication skills, with the ability to convey risk findings to relevant stakeholders within assigned scope.
• Effective stakeholder management and internal consulting skills across Tech & Biz functions.
• Ability to work under moderate guidance and supervision while maintaining strong risk sensitivity & control mindset.
Certifications
• CIA (Certified Internal Auditor)/ CRMA (Certification in Risk Management Assurance)/ ISO 31000 Lead Risk is an advantage;
• Demonstrate sufficient knowledge of relevant technology and security standards (e.g. ISO/IEC 27001, PCI DSS, NIST CSF, ISO/IEC 27701, ITIL, COBIT, GDPR,...) is a plus.
Thông tin chung
Nơi làm việc