Director, Enterprise Risk & Business Resiliency

Shape Enterprise Resilience Across the Global Outsourcing Industry

Resilient organizations need visionary leaders who can turn uncertainty into strategic advantage. The Director, Enterprise Risk & Business Resiliency will protect people, operations, and client trust across a growing global outsourcing business. Shape enterprise-wide frameworks, influence executive decisions, and strengthen continuity across international locations while building a long-term career with Emapta, designed for top 1% talent ready to lead globally.

Snapshot

• Employment Type: Full-time
• Work Setup: Hybrid, Ortigas
• Shift: Flexible Shift, Weekends Off (Flexible to work holidays or weekends as needed)

Benefits

• Competitive Salary Package
• Hybrid work arrangement
• HMO coverage with free dependent upon regularization
• Prime office location in Ortigas (Easy access to MRT stations, restaurants, and banks)
• Salary Advance Program through our banking partner (Eligibility and approval subject to bank assessment. Available to account holders with minimum of 6 months company tenure.)
• Unlimited upskilling through Emapta Academy courses (Want to know more Visit: https://emapta.com/training-calendar/)
• Free 24/7 access to our office gyms (Ortigas and Makati) with a free physical fitness trainer!
• Exclusive Emapta Lifestyle perks (hotel and restaurant discounts, and more!)
• Unlimited opportunities for employee referral incentives across the organization
• Standard government and Emapta benefits
• Total of 20 annual leaves to be used on your own discretion (including 5 credits convertible to cash)
• Fun engagement activities for employees
• Mentorship and exposure to global leaders and teams
• Career growth opportunities
• Diverse and supportive work environment

Qualifications

• Bachelor's degree in a relevant discipline
• 10+ years of experience in business continuity, enterprise risk, or operational resilience, including 3–5 years leading teams at the manager or senior manager level
• Experience building or materially rebuilding a multi-site enterprise risk register and coordinating cross-functional risk intake
• Proven ability to quantify financial risk exposure and defend assessments before CFO- or Board-level audiences
• Working knowledge of RA 11058, DOLE Department Order 198-18, and Philippine Occupational Safety and Health Standards
• Experience managing accredited safety officers, occupational health personnel, DOLE inspections, CCTV systems, contracted guards, and surveillance privacy obligations
• Multi-site experience, preferably across multiple countries, within a BPO, global capability center, or shared services environment
• Background supporting client-embedded delivery, audits, and contractual continuity obligations
• Executive-level communication skills and experience presenting to the COO, Executive Committee, or Board
• Demonstrated leadership during actual crises, beyond tabletop exercises

Preferred

• Business continuity certification, such as CBCP, MBCI, CBCI, or ISO 22301 Lead Implementer or Auditor
• Risk management certification or training in ISO 31000, COSO ERM, CRISC, or FAIR
• DOLE accreditation as a Safety Officer 3, Safety Officer 4, or Safety Practitioner
• Familiarity with ISO 27001, SOC 2, insurance, business interruption coverage, and contractual risk-transfer mechanisms
• Experience building a function, including developing procedures, recruiting leaders, and establishing reporting cadences

Competency Profile

• Sound judgment in identifying and prioritizing material business risks
• Data-based decision-making supported by documented methods and operational testing
• Confidence in defending risk assessments and responding constructively to challenges
• Cross-functional influence that secures risk ownership and mitigation commitments
• Calm, decisive crisis leadership and clear communication with executives, employees, and clients
• Ability to build operating models in evolving environments
• Commercial awareness of resilience costs, exposure, and client retention

Responsibilities

Enterprise Risk Management

• Own the enterprise risk register, including its structure, scoring, tolerance thresholds, and escalation triggers.
• Lead organization-wide risk intake and hold named owners accountable for mitigation plans and quarterly attestations.
• Quantify financial exposure and mitigation-versus-acceptance costs with Finance.
• Maintain monthly reporting, escalate threshold breaches, and present risk positions to executive and Board-level audiences.
• Integrate risk reporting into governance processes and coordinate documentation with Compliance and Audit.

Business Continuity and Crisis Management

• Own the business continuity framework across all locations, including policies, standards, plans, and governance.
• Maintain business impact analyses, dependency maps, and recovery objectives across critical sites, services, and functions.
• Identify and address single points of failure involving people, systems, vendors, and facilities.
• Manage annual exercises, after-action reviews, and remediation through closure.
• Serve as incident commander and coordinate stakeholder communications during major disruptions.
• Review client continuity requirements, support audits and assessments, and extend the framework across international locations.

Employee Health Services and Occupational Safety

• Lead Employee Health Services and Safety Officers in compliance with Philippine labor and occupational safety regulations.
• Ensure each site meets statutory staffing requirements for health personnel and accredited safety officers.
• Oversee clinics, healthcare providers, health programs, emergency response, and safety committees.
• Maintain regulatory records, workplace inspections, and DOLE inspection readiness.
• Promote hazard identification, corrective action, and reduced workplace incidents.

Physical Security and Surveillance

• Oversee access controls, guarding, visitor procedures, asset movement, incident reporting, and investigations.
• Manage CCTV coverage, retention, monitoring, and footage release in compliance with privacy, legal, and HR requirements.
• Govern contracted security providers in partnership with Procurement.
• Ensure security controls meet requirements for regulated and data-sensitive accounts.

Leadership and Governance

• Build and lead the enterprise risk and business resiliency function.
• Recruit and develop the Business Continuity Planning Manager, Physical Security Manager, and wider team.
• Establish performance indicators, reporting cadences, operating rhythms, and evidence standards.
• Manage budgets and present cost-versus-exposure analyses supporting resilience investments.

Priority Mandates: First 12 Months

Two existing programs will transfer to this role on the first day and must be completed successfully.

Mandate 1: Company-Wide Risk Register and Refresh Framework

• Design the risk register structure, ownership model, scoring, tolerance thresholds, and escalation paths.
• Establish a Finance-approved methodology assigning peso-denominated exposure values to material risks.
• Implement phased risk intake across all functions.
• Introduce quarterly attestations, monthly exception reporting, and event-triggered updates.
• Present a quantified enterprise risk view to the COO by December and integrate it into executive and Board reporting.

Mandate 2: Strengthening Business Continuity Controls

• Assess existing controls against ISO 22301 principles and contractual requirements.
• Address gaps in notifications, call trees, remote-work continuity, site failover, dependency mapping, and recovery objectives.
• Validate recovery objectives through testing and realistic continuity exercises.
• Assign findings to named owners and monitor corrective actions through closure.
• Create a reusable response pack for client audits and due diligence reviews.

Success Measures

• Present the enterprise risk view by December and complete departmental intake within 6 months of launch.
• Achieve at least 95% on-time quarterly attestations, with every material risk assigned an owner and mitigation plan.
• Exercise every critical site and service line within 12 months and assign all findings to owners and closure dates.
• Maintain zero adverse DOLE findings and meet statutory health and safety staffing requirements.
• Complete after-action reviews within 5 working days of major incidents and track corrective actions through closure.
• Fill both manager positions within 6 months and ensure they are fully performing.

Join Emapta, recognized as one of HR Asia's Best Companies to Work For in Asia 2025 and winner of Inspiring Workplaces Australasia 2026. With a 50/50 gender ratio and a culture rooted in care and empathy, you'll feel valued from day one. We're committed to growing talent and setting you up for success.

Be part of a team that showcases Filipino excellence to the world. With over 30 offices across 11 countries and 1,200+ clients, you'll create real impact every day—whether you work from home or on-site. Our 100% virtual recruitment process makes it easy to get started.

At Emapta, you're not just joining a company—you're becoming part of a thriving community of 12,000+ professionals growing careers with purpose. And behind every partnership we build is a deep respect for people and the impact they make.

We place integrity at the heart of everything we do and truly value the human experience. That's why, for clients, it's a profound and transformational process that gives them the opportunity to achieve the business growth they desire.

Tim Vorbach, CEO

#EmaptaEra