Assistant General Manager - Risk Management
Banking / Insurance / Financial Services
About the Employer
Job Description
ASSISTANT GENERAL MANAGER - RISK MANAGEMENT
People's Bank, a premier bank in Sri Lanka with the largest customer base providing innovative financial solutions to its diversified clientele for over six decades and as a conducive environment for those who strive to achieve excellence and believe in professionalism, the Bank is looking for a talented & dynamic individual to fill the following position in the Bank.
The duties and responsibilities relevant to the position of Assistant General Manager- Risk Management among others are:
- Provide leadership in developing, implementing and continuously enhancing the Bank’s Operational Risk Management Framework, policies, methodologies and governance arrangements.
- Oversee the identification, assessment, monitoring, measurement and reporting of operational risks across the Bank.
- Strengthen the Bank’s Risk and Control Self-Assessment (RCSA), Risk Control Matrix (RCM), Key Risk Indicators (KRIs), operational risk event and loss data management, scenario analysis and operational risk stress testing processes.
- Establish effective mechanisms for identification and escalation of emerging operational risks and material control weaknesses.
- Oversee the assessment, investigation, analysis and reporting of operational loss events, including root-cause analysis and remedial action monitoring.
- Provide independent risk oversight of IT, cyber technology, information security, cloud, digital banking and emerging technology risks, including risks arising from Artificial Intelligence and third-party technology service providers.
- Ensure effective implementation and continuous enhancement of the IT Risk Management Framework, including technology risk assessments, IT risk registers, KRIs, control assessments and risk reporting.
- Provide risk oversight of cybersecurity and information security risks, including coordination with relevant assurance and control functions.
- Provide oversight and strategic direction to the Data Protection Unit, ensuring appropriate governance, risk assessment, compliance monitoring and reporting in relation to data protection and privacy requirements.
- Oversee technology and operational aspects of Business Continuity Management, Disaster Recovery and operational resilience, in coordination with relevant functions.
- Provide independent risk opinions and recommendations on major technology projects, digital initiatives, outsourcing arrangements, new products, systems and material process changes.
- Strengthen the Bank’s third-party/vendor and outsourcing risk management framework, particularly for critical technology and operational service providers.
- Ensure effective monitoring and timely reporting of material operational and IT risks to the DGM (Risk Management), Board Integrated Risk Management Committee (BIRMC), Board and relevant management committees.
- Liaise with Internal Audit, Information Security, Compliance, IT, Data Protection, Business Continuity and other assurance/control functions to strengthen the Bank’s overall risk and control environment.
- Ensure compliance with applicable directions/guidelines, regulatory requirements, data protection requirements of Central Bank of Sri Lanka (CBSL) and recognized international standards and best practices.
- Lead and develop a high-performing team of operational, IT and technology risk professionals and promote a strong risk culture across the Bank.
ELIGIBILITY CRITERIA
- Should be a citizen of Sri Lanka.
EDUCATIONAL AND PROFESSIONAL QUALIFICATIONS
- Should possess a Bachelor’s Degree in Risk Management, Banking, Finance, Information Technology, Computer Science, Cybersecurity, Business Administration, Engineering or a related discipline from a university or degree awarding institute recognized by the University Grants Commission of Sri Lanka. AND
- Should possess minimum 1 Professional certification such as CISSP, GSTR, GISP, CISA, CISM, CRISC, or Postgraduate qualification in Cyber Security / Information Security.
- A postgraduate qualification in Risk Management, Banking, Finance, Information Security, IT, Audit, Cybersecurity or related discipline will be advantageous.
- FRM will be a distinct advantage.
EXPERIENCE
- At least 05 years of senior managerial level experience, with substantial experience in banking, financial services or a similarly highly regulated environment.
- Minimum 03 years’ experience in Operational Risk Management and Technology Risk Management, with demonstrated exposure.
- Proven experience in developing and implementing operational, technology and cyber risk frameworks, with strong expertise in risk assessment, control management, IT governance, cybersecurity, technology resilience, regulatory compliance, risk reporting, stakeholder engagement at senior management and Board levels, and the ability to lead and develop professional teams in a complex organizational environment.
AGE
Age preferably below 55 years as at closing date of application.
METHOD OF SELECTION
- Shortlisted applicants based on the stipulated qualifications and experience will be called for an interview. The appointment will be made on contract basis.
CONDITIONS OF EMPLOYMENT
The position of Assistant General Manager- Risk Management is equivalent to the grade of Assistant General Manager in executive management. The performance will be evaluated annually.
REMUNERATION
An attractive and negotiable remuneration package commensurate with qualifications and experience will be offered to the selected candidate for the above position.
APPLICATIONS
The applicants are instructed to fill in the Application form on the Career page of People’s Bank website and submit the same through the People’s Bank website (www.peoplesbank.lk) on or before 09.11.2026.
An email confirmation of receipt will be sent upon the receipt of the application. In the event a confirmation has not been received within a reasonable period of time, you may enquire regarding the application on telephone numbers 011 3741421/011 3741420.
All applications will be treated in strict confidentiality and any form of canvassing will be regarded as a disqualification. All non-complying applications or applications forwarded through post, e-mail or any other mode will be disregarded.
The Bank reserves the right to decide the number of vacancies, postponement or cancellation of recruitment or on any other information not included in the advertisement.
By submitting your application, you acknowledge that People’s Bank will process your personal data solely for purposes connected with the recruitment and selection process for this vacancy. People’s Bank processes your personal data in accordance with the data protection principles set out in the Personal Data Protection Act, No. 9 of 2022, as amended. For further information regarding how we collect, use, protect and retain your personal data, and how you may exercise your rights as a data subject, please refer to the People’s Bank Privacy Notice available at www.peoplesbank.lk.
Deputy General Manager (Human Resources) People’s Tower - Level 14 No. 374, Dr. Colvin R. de Silva Mawatha Colombo - 02.
