Assistant Manager, Risk Advisory
PDAX is a cryptocurrency exchange and wealth app for Filipino users to trade digital assets, invest in government bonds, and access digital collectibles.
Funding history
Projects
About PDAX
PDAX is a cryptocurrency exchange and wealth app for Filipino users. It enables crypto trading, government bond investments, and digital collectibles access. PDAX is a BSP-licensed virtual asset service provider and offers institutional services via PDAX Prime and PDAX Connect.
Skills
About the Role
You will review processes, systems, and operations under the Enterprise Risk Management Framework. You will assess IT risks, review policy documents, communicate vulnerabilities, recommend controls and automation, track remediation, investigate operational incidents, and support technology compliance and audit-readiness initiatives.
Requirements
- 3 to 4 years of experience in IT Risk Advisory, IT Audit, Technology Compliance, or IT Process Assurance, preferably in financial services or fintech.
- Familiarity with fintech systems, API integrations, payment-processing workflows, cloud environments, and IT General Controls.
- Blockchain, cryptocurrency, or digital-asset platform familiarity is preferred.
- Cybersecurity, DevOps, and software engineering process familiarity is preferred.
- Process mapping and technical data analysis skills.
- Root-cause identification and problem-solving skills.
- Ability to translate IT vulnerabilities into business insights.
- Assessment-report and remediation-roadmap writing skills.
Responsibilities
- Conduct process, system, and operational reviews according to the risk assessment schedule.
- Provide technical guidance and insight.
- Create, update, and refine IT Risk Assessments.
- Review policies, functional instruction manuals, work procedures, and business instruction manuals.
- Communicate technical and process vulnerabilities for remediation.
- Recommend process improvements, system controls, and automation opportunities.
- Escalate critical technology findings and security gaps.
- Monitor remediation and process optimization plans.
- Review operational risk incident reports and action items.
- Support technology compliance, audit readiness, and continuous-improvement initiatives.
- Conduct risk-awareness campaigns and learning activities.
