The Non-Financial Risk Officer supports the Non-Financial Risk Manager in executing the Bank's Non-Financial Risk (NFR) Management Framework. Operating as part of the Second Line of Defense, the role provides analytical support for the identification, assessment, monitoring, and reporting of operational, compliance, IT, reputational, and other non-financial risks across Salmon Bank's business units. The analyst works closely with First Line of Defense (1LOD) process owners and risk officers, and contributes to materials presented to the Risk Oversight Committee (ROC) and Senior Management.
Key ResponsibilitiesRisk Identification & Assessment
Assist in conducting risk and control self-assessments (RCSA) for existing and new products, processes, and systems in coordination with 1LOD process owners.
Maintain and update the Bank's risk register, ensuring accuracy of risk ratings, control effectiveness assessments, and residual risk exposures.
Support the review of new product and process approvals by identifying and documenting key non-financial risks and corresponding controls prior to go-live.
Assist in conducting risk assessments for outsourcing arrangements.
Monitoring & Reporting
Track and monitor key risk indicators (KRIs), operational loss events, control exceptions, and near-misses across business units.
Prepare periodic risk reports and dashboards for review by the Non-Financial Risk Manager, including materials for the Risk Oversight Committee (ROC).
Monitor action plans arising from audit findings, regulatory examinations (BSP), and self-identified risk issues; escalate overdue or unresolved items to the NFR Manager.
Support the production of trend analysis and thematic risk reporting to surface emerging risk patterns requiring management attention.
Business Partnering
Serve as a risk resource for 1LOD business units, providing guidance on risk identification and control design during process changes or new initiatives.
Coordinate with business units to collect risk data, validate control documentation, and support risk awareness activities.
Participate in cross-functional working groups and project teams as the 2LOD risk representative.
Documentation & Governance
Maintain risk management documentation, including risk policies, procedures, risk frameworks, and governance records.
Assist in preparing materials for risk committees and governance forums, including ROC reports, management packs, and meeting minutes.
Education
Bachelor's degree in Business Administration, Finance, Accounting, Economics, Law, Information Technology, or a related field.
Experience
Minimum 3 years of experience in risk management, internal audit, compliance, or a related function within a bank or financial institution.
Exposure to BSP regulatory requirements and the Philippine banking regulatory environment is a plus.
Experience supporting risk reporting for senior management or board-level committees is an advantage.
Knowledge
Working knowledge of the BSP Manual of Regulations for Banks (MORB) and relevant BSP circulars on operational risk, IT risk, and outsourcing.
Familiarity with the Data Privacy Act of 2012 (RA 10173) and NPC issuances as they apply to banking operations.
Understanding of operational risk frameworks (e.g., RCSA, KRI, loss event management) and internal control concepts.
Basic understanding of the Three Lines of Defense model and its application in financial institutions.
Skills
Strong analytical and critical thinking skills; able to identify risk themes from large data sets or process documentation.
Proficient in MS Office (Excel, Word, PowerPoint)
Strong written and verbal communication skills; able to prepare clear reports for management and committee consumption.
Detail-oriented with strong documentation habits and ability to manage multiple tasks under deadlines.
Collaborative and able to build working relationships with diverse business unit stakeholders.
Skills Required
- Bachelor’s degree in Business Administration, Finance, Accounting, Economics, Law, Information Technology, or a related field
- At least 3 years of experience in risk management, internal audit, compliance, or a related function within a bank or financial institution
- Working knowledge of the BSP Manual of Regulations for Banks and relevant BSP circulars covering operational risk, IT risk, and outsourcing
- Familiarity with the Data Privacy Act of 2012 (RA 10173) and NPC issuances applicable to banking operations
- Understanding of operational risk frameworks, including RCSA, KRI, loss event management, and internal controls
- Basic understanding of the Three Lines of Defense model in financial institutions
- Proficiency in Microsoft Office, including Excel, Word, and PowerPoint
- Strong analytical and critical-thinking skills
- Strong written and verbal communication skills for management and committee reporting
- Ability to maintain detailed documentation and manage multiple deadlines
- Collaborative stakeholder-management and relationship-building skills
- Exposure to BSP regulatory requirements and the Philippine banking regulatory environment
- Experience supporting risk reporting for senior management or board-level committees
What We Do
Salmon Group Ltd is a financial technology company serving Filipino consumers with modern, inclusive financial services. Its platform combines technology, product design, security, data analytics and customer care to make finance easier to access. Salmon offers consumer-focused products including short-term loans and digital banking services, with the broader mission of improving convenience, affordability and financial inclusion while operating securely around the clock.
