IT Risk Management Associate

BAYAD CENTER is the country's pioneer and leader in the over-the-counter multiple bills payment collection business.

CIS Bayad Center, Inc. is a wholly owned subsidiary of MERALCO (Manila Electric Co.).

With over 10 years of serving the Filipino, Bayad Center continues to define and set the standards in the industry with its increasing number of biller partners and fast-growing network of payment centers, and introduction of innovative service lines.

The BAYAD CENTER is not resting on its laurels. At present, the BAYAD CENTER network is composed of more than a thousand collection centers in the Philippines and, soon, hundreds more overseas.

ROLES AND RESPONSIBILITIES

• Develops and maintains IT risk management strategies, frameworks, policies, and procedures aligned with enterprise risk management and regulatory requirements.
• Leads and monitors IT risk, compliance, audit, and governance programs, collaborating with internal stakeholders to strengthen risk management and internal controls.
• Assesses, monitors, and reports significant IT risks, control effectiveness, audit findings, and corrective action plans to ensure timely resolution.
• Establishes and oversees IT resiliency, business continuity, and disaster recovery strategies and initiatives to support operational resilience and regulatory compliance.
• Supports data privacy initiatives by assisting the Data Privacy Champion and ensuring IT compliance with corporate, contractual, and regulatory requirements.
• Leads IT risk management by providing visibility into technology risks and developing frameworks that align IT activities with business objectives and risk tolerance.
• Collaborates with corporate oversight teams to strengthen risk governance, ensure regulatory compliance, and support internal and external IT audits.
• Oversees IT risk-related service contracts and serves as the IT Data Privacy Champion, providing guidance on regulatory and privacy requirements.

QUALIFICATIONS

• Bachelor's degree in Computer Science, Engineering, Management, or a related field.
• At least 2 years of experience in IT Risk Management, IT Controls, IT Auditing, or Information Security.
• Knowledge of IT governance, risk management, and compliance practices is preferred.
• Good knowledge of IT governance, risk management, business continuity, and industry frameworks such as COBIT, ISO standards, and PMBOK.
• Strong understanding of risk management processes and both business and IT domains.
• Basic knowledge of regulatory requirements, including the Data Privacy Act and relevant industry regulations.
• Demonstrates integrity, dependability, and adaptability while maintaining high ethical standards and accountability.
• Shows leadership and initiative by taking ownership, providing direction, and embracing responsibilities and challenges.
• Applies creativity and innovation to solve problems and develop effective, forward-thinking solutions.