Business Operational Risk Officer

About the role

The Business Operational Risk Officer supports the Team Head in administering operational risk management activities across BDO Insurance business units. The role acts as a liaison between the Operational Risk Management Unit (ORMU) and the various business units, ensuring risk assessments, continuity planning and information‑security processes are properly executed.

Key responsibilities

• Ensure compliance of assigned units with Risk and Control Self‑Assessment (RCSA) and Key Risk Indicator (KRI) requirements.
• Review RCSA/KRI periodically with process owners and propose necessary changes.
• Monitor and report the status of KRIs for all business units.
• Coordinate Business Continuity Planning (BCP) activities, including call‑tree management, drill participation and test reporting.
• Maintain and update the BDOI employee contact database (call‑tree and text‑blast worksheets) on a monthly basis.
• Facilitate access entitlement reviews (AER) and access review self‑assessment (ARSA) for hosted and BU‑managed applications.
• Participate in the annual Internal Audit Inspection (IAI) and ensure 100% completion of mandatory BISCUIT courses.
• Attend all ORMU‑mandated trainings and meetings.
• Perform other related tasks as assigned by senior management.

Required profile

• Bachelor’s degree.
• 3 to 5 years of experience in operational risk, risk assessment or related fields.
• Strong understanding of RCSA, KRI and BCP processes.
• Ability to work collaboratively with multiple business units and coordinate large‑scale risk initiatives.

Required skills

• Risk and Control Self‑Assessment (RCSA) methodology.
• Key Risk Indicator (KRI) monitoring.
• Business Continuity Planning (BCP) coordination.
• Information security review processes (AER, ARSA).