Senior Risk and Compliance Assurance Manager

About GoTyme

GoTyme is a joint venture between the Gokongwei Group, one of the biggest conglomerates in the Philippines, and the Singapore-headquartered digital banking group Tyme. This venture combines the trusted Gokongwei brand, customer base, and distribution ecosystem with Tyme’s globally proven digital banking technology and hands-on experience building South Africa’s leading digital bank, TymeBank, one of the fastest-growing digital banks in the world today.

At GoTyme, we have embarked on a journey to democratize financial services and bring next-level banking to the Philippines. We seek individuals who share our belief that the game is worth changing, to join our growing team of GoTymers as we build, launch, and scale a bank that empowers all Filipinos to navigate a path to financial freedom.

About the role

This role leads GoTyme's second-line assurance function (Under combined assurance program), providing independent, risk-based assessment of the design and operating effectiveness of controls addressing risks, including compliance risks, across the organization. The Manager is responsible for the assurance methodology, annual plan, reporting, and issue-escalation process, and coordinates coverage with Internal Audit and other assurance providers (if applicable). He/she gives the CRO, CCO and senior leadership clear, objective insight into control effectiveness, systemic themes, remediation progress, and regulatory readiness.

• Own and continuously improve the second-line assurance methodology, testing standards, procedures, templates, and quality criteria.
• Develop fit for purpose compliance testing strategy and program.
• Manage issue management program for all regulatory findings and external audit findings to ensure robust end to end remediation.
• Develop, maintain, and reprioritize the annual assurance plan using risk exposure, control criticality, regulatory obligations, prior findings, business change, and available capacity.
• Lead the end-to-end assurance lifecycle: scoping, planning, evidence requirements, control design assessment, operating-effectiveness testing, review, reporting, issue registration, follow-up, and retesting.
• Ensure testing is sufficiently independent from control design and execution, with clear documentation of evidence, sampling, judgment, conclusions, and limitations.
• Establish consistent criteria for control ratings, deficiency classification, severity, aggregation, escalation, and remediation validation, while preserving stricter requirements under applicable regulatory or framework-specific methodologies.
• Review and challenge assurance work performed by team members and other assurance functions (if applicable); apply a “test once where possible” approach when reliance criteria are met.
• Produce concise, decision-useful reports for the CCO and CRO, senior leadership, governance forums, and relevant control owners, highlighting material deficiencies, systemic themes, overdue actions, and residual risk implications.
• Ensure identified control gaps, ineffective controls, and regulatory findings are formally recorded in the designated issue-management process and linked to the relevant risk and control context.
• Monitor remediation plans, challenge the adequacy of proposed actions and target dates, validate completed remediation, and require retesting where necessary before concluding that a control is effective.
• Coordinate assurance coverage with Internal Audit, Compliance, Risk, Legal, external auditors, Finance and control owners to reduce duplication and close coverage gaps without compromising independence.
• Promote stronger control ownership and embed assurance expectations through guidance, training, stakeholder engagement, and lessons learned

Requirements

• Bachelor's degree specializing in accounting, finance, business, law, economics, risk management, or a related field
• More than 8 years experience in risk, compliance, internal audit, internal controls, or assurance within banking, payments, fintech, or another regulated industry, including time at a level with real ownership..
• Experience building and delivering a risk-based annual assurance plan end to end, from scope through reporting and governance discussion.
• Hands-on experience assessing control design and operating effectiveness, evaluating evidence, and managing testing quality.
• Experience identifying and escalating material, recurring, or systemic control deficiencies and overseeing the resulting action plans.
• Experience with regulatory examinations, supervisory requests, or formal regulatory assurance programs preferred, not required.
• Experience using data analytics, automation, or continuous-monitoring techniques to improve assurance coverage preferred, not required.
• Strong grounding in internal control principles, compliance testing and risk management, and assurance practice within a regulated financial-services environment.
• Working knowledge of the three-lines model and how second-line assurance sits alongside Internal Audit and Compliance.
• Familiarity with recognized internal control and assurance frameworks and with regulatory assurance expectations for banks.
• Professional certification in internal audit, risk, compliance, accounting, or controls (CIA, CISA, CFE, CPA/ACA, CRMA, or equivalent) preferred, not required.