Assistant Manager Operational Risk- IT

Department: Risk Management

Reports To: Head Enterprise Risk Management

Job Grade: OG-I

Total Positions: 01

Job Location: Head Office, Islamabad

What is Assistant Manager Operational Risk- IT & Digital Risk - MMBL?

The Assistant Manager – Operational Risk (IT & Digital Risk) assists the Unit Lead in identifying, assessing, monitoring, and mitigating operational risks associated with the bank's information technology (IT) infrastructure, digital platforms, and related processes.

• Conduct risk assessments of IT systems, digital platforms, and related processes.
• Identify, evaluate, and analyze emerging IT and digital risks.
• Analyze the impact of new technologies and digital initiatives on the bank's operational risk profile.
• Develop and implement key risk indicators (KRIs) and metrics to monitor IT and digital risks.
• Monitor and track the effectiveness of risk mitigation controls.
• Evaluate the design and effectiveness of IT and digital risk controls.
• Recommend and implement enhancements to risk controls to address identified vulnerabilities and emerging threats.
• Investigate and analyze IT and digital risk incidents, identify root causes with relevant stakeholders, and recommend corrective actions.
• Coordinate with IT, security, and other relevant departments to ensure timely and effective incident resolution.
• Collaborate with IT, security, compliance, and other departments to ensure effective risk management practices.
• Review existing and new policies, procedures, SOPs, and other related documents.
• Review IT outsourcing arrangements to ensure compliance with regulatory frameworks.
• Perform UATs, system/application testing, and advise stakeholders on addressing associated risk issues.
• Assist in communicating IT and digital risk issues and recommendations to senior management and stakeholders.
• Stay updated on industry trends and developments in IT and digital risk management.

• Bachelor's/Master's degree in Information Technology or Computer Science from a reputable institution.
• Relevant certifications in IT risk, information security, or related areas (preferred).
• Minimum 3–5 years of experience in risk management, with a focus on IT and digital risk, preferably in the banking sector.
• Strong understanding of IT infrastructure, digital platforms, and related technologies.

• Solid understanding of Operational Risk Management (ORM) concepts.
• In-depth knowledge of risks associated with technology and digital platforms.
• Familiarity with regulatory frameworks, industry best practices, and compliance requirements related to digital and branchless banking.
• Ability to collaborate effectively with risk, IT, compliance, and business teams, while fostering a risk-aware culture within the organization.

Mobilink Microfinance Bank Ltd. is providing banking services to over 48 million registered users including 20+ million monthly active customers across Pakistan. With a hybrid model that combines traditional microfinance with mobile/digital banking technologies, the bank now operates with over 114 branches and 270,000 branchless banking agents and provides a USSD (GSM) based digital channel offering savings, micro enterprise (MSME) loans, small housing loans, remittances, collection (utility bills and loan instalments), mobile wallets, insurance, G2P, B2B & B2P payments; thus, playing a leading role in the promotion of financial inclusion. MMBL is committed to fostering a positive and productive workplace, and our core values reflect this focus. These values include promoting innovation and entrepreneurship, encouraging teamwork and collaboration, and prioritizing a customer-centric approach in all aspects of our business.

This is an opportunity for someone who is passionate about making a difference and playing a key role in driving transformative change. Our team is committed to empowering millions with the tools necessary to succeed in the digital era, and we\'re looking for a talented individual to join us in this endeavour.