BPO Risk & Controls Manager
- Compensation
- Not disclosed
- Location
- Quezon City, Metro Manila, Philippines
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- Not specified
- Category
- Not specified
- Posted
Skills
Must have
- BPO Risk & Controls Governance Experience: Proven track record in first-line or second-line operational risk management, internal audit, or controls testing within a BPO or offshore shared-services de
- Segregation of Duties & Independent Assurance: Demonstrated capability to operate independently from day-to-day operational processing to deliver objective monitoring, testing, and challenge.
- Multi-Domain Risk Knowledge: Strong working knowledge across operational risk frameworks, data privacy regulations, cybersecurity baselines, physical security standards, and third-party vendor risk ma
- Control Testing & Framework Execution: Practical experience designing control test plans, executing walkthroughs, evaluating control effectiveness, and documenting audit-ready workpapers.
- Cross-Border Stakeholder Management: Exceptional communication and influence skills to engage effectively with offshore teams in Manila and onshore executive leaders in Australia.
Nice to have
- Professional certifications in risk management, audit, or compliance (e.g., CRISC, CISA, CIA, or CRM).
- Prior experience managing risk and compliance frameworks for Australian corporate, financial services, or salary packaging entities.
- Direct working experience with offshore delivery partners in the Philippines (e.g., MicroSourcing) and third-party vendor oversight models.
- Experience implementing automated control testing, risk management platforms, or GRC software (e.g., RSA Archer, ServiceNow GRC, OneTrust).
Full description
Discover your 100% YOU with MicroSourcing!Position: Risk & Controls Manager - BPO/Shared Services
Location: Eastwood, Libis, Quezon City
Work setup & shift: Hybrid | Day Shift
Why join MicroSourcing?You'll have:Competitive Rewards: Enjoy above-market compensation, healthcare coverage on day one, plus one or more dependents, paid time-off with cash conversion, group life insurance, and performance bonuses
A Collaborative Spirit: Contribute to a positive and engaging work environment by participating in company-sponsored events and activities.
Work-Life Harmony: Enjoy the balance between work and life that suits you with flexible work arrangements.
Career Growth: Take advantage of opportunities for continuous learning and career advancement.
Inclusive Teamwork: Be part of a team that celebrates diversity and fosters an inclusive culture.
Your Role:
As a Risk & Controls Manager, you will:
- Offshore Risk Profile Development: Establish and maintain a comprehensive BPO risk register covering operational, customer, privacy, cyber, contractual, people, physical security, resilience, and third-party vendor risks.
- Key Control Design & Effectiveness Testing: Develop and execute a repeatable testing program to evaluate whether key internal controls across Manila-based operations are designed appropriately and operating effectively.
- Independent Challenge & Evidence-Based Assurance: Provide independent monitoring, testing, and constructive challenge to operational teams without replacing control ownership held by business units, technology teams, or the BPO vendor.
- Control Gap & Incident Remediation: Identify control deficiencies, emerging risks, and compliance breaches; partner with business owners to design corrective action plans and track remediation to completion.
- Cross-Functional Stakeholder Alignment: Partner with Risk, Cyber, Legal, Privacy, Technology, People & Culture, and MicroSourcing management to align risk management frameworks and escalation pathways.
- Risk Governance & Executive Reporting: Prepare detailed assurance reports, control testing summaries, and key risk indicator (KRI) dashboards for the Head of Quality & Risk and executive risk committees.
What You Need:Non-negotiables
- BPO Risk & Controls Governance Experience: Proven track record in first-line or second-line operational risk management, internal audit, or controls testing within a BPO or offshore shared-services delivery model.