Assistant General Manager (Risk Management)

People’s Bank, a premier bank in Sri Lanka with the largest customer base, has been providing innovative financial solutions to its diversified clientele for over six decades. Providing a conducive environment for those who strive for excellence and believe in professionalism, the Bank is looking for a talented and dynamic individual to fill the position of Assistant General Manager - Risk Management.

Position Summary

• Role: Assistant General Manager - Risk Management

• Grade: Equivalent to the grade of Assistant General Manager in executive management

• Company: People's Bank

• Location: Colombo 02, Sri Lanka

• Employment Type: Contract Basis (Annual performance evaluation)

Key Responsibilities

• Provide executive leadership in developing, implementing, and continuously enhancing the Bank's Operational Risk Management Framework, policies, methodologies, and governance arrangements.

• Oversee the identification, assessment, monitoring, measurement, and reporting of operational risks across the Bank.

• Strengthen the Bank's Risk and Control Self-Assessment (RCSA), Risk Control Matrix (RCM), Key Risk Indicators (KRIs), operational risk event and loss data management, scenario analysis, and operational risk stress testing processes.

• Establish effective mechanisms for the identification and escalation of operational risks and material control weaknesses.

• Oversee the assessment, investigation, analysis, and reporting of operational loss events, including root-cause analysis and remedial action monitoring.

• Provide independent risk oversight of IT, cyber technology, information security, cloud computing, digital banking, and emerging technology risks, including risks arising from Artificial Intelligence and third-party technology service providers.

• Ensure effective implementation and continuous enhancement of the IT Risk Management Framework, covering technology risk assessments, IT risk registers, KRIs, control assessments, and risk reporting.

• Provide risk oversight of cybersecurity and information security risks, including coordination with relevant assurance and control functions.

• Provide oversight and strategic direction to the Data Protection Unit, ensuring appropriate governance, risk assessment, compliance monitoring, and reporting in relation to data protection and privacy requirements.

• Oversee technology and operational aspects of Business Continuity Management, Disaster Recovery, and operational resilience in coordination with relevant functions.

• Provide independent risk opinions and recommendations on major technology projects, digital initiatives, outsourcing arrangements, new products, systems, and material process changes.

• Strengthen the Bank's third-party/vendor and outsourcing risk management framework, particularly for critical technology and operational service providers.

• Ensure effective monitoring and timely reporting of material operational and IT risks to the DGM (Risk Management), Board Integrated Risk Management Committee (BIRMC), and relevant management committees.

• Liaise with Internal Audit, Information Security, Compliance, IT, Data Protection, Business Continuity, and other assurance/control functions to strengthen the Bank's overall risk and control environment.

• Ensure compliance with applicable directions/guidelines, regulatory requirements, data protection requirements of the Central Bank of Sri Lanka (CBSL), and recognized international standards and best practices.

• Lead and develop a high-performing team of operational, IT, and technology risk professionals and promote a strong risk culture across the Bank.

Qualifications & Eligibility Criteria

Citizenship & Age

• Citizenship: Must be a citizen of Sri Lanka.

• Age Preference: Preferably below 55 years as of the closing date of applications.

Educational & Professional Qualifications

• Degree: A Bachelor’s Degree in Risk Management, Banking, Finance, Information Technology, Computer Science, Cybersecurity, Business Administration, Engineering, or a related discipline from a university or degree-awarding institute recognized by the University Grants Commission of Sri Lanka (UGC).

  AND

• Professional Certifications: Minimum of one (01) professional certification such as CISSP, CSTRT, GISP, CISA, CISM, CRISC, or a Postgraduate qualification in Cybersecurity / Information Security.

• Added Advantages:

  • A postgraduate qualification in Risk Management, Banking, Finance, Information Technology, Business Administration, or a related field.

  • A recognized professional qualification in Risk Management, Banking, Information Technology, Information Security, IT, Audit, Cybersecurity, or a related discipline.

  • Holding a FRM qualification will be a distinct advantage.

Experience Requirements

• At least five (05) years of senior managerial level experience, with substantial experience in banking, financial services, or a similarly highly regulated environment.

• Minimum of three (03) years of experience in Operational Risk Management and Technology Risk Management, with demonstrated exposure.

• Proven experience in developing and implementing operational, technology, and cyber risk frameworks, with strong expertise in risk assessment, control management, IT governance, cybersecurity, technology resilience, regulatory compliance, risk reporting, stakeholder engagement at senior management and Board levels, and the ability to lead and develop professional teams in a complex organizational environment.

Remuneration & Benefits

• An attractive and negotiable remuneration package commensurate with qualifications and experience will be offered to the selected candidate.

Selection Method

• Shortlisted applicants based on stipulated qualifications and experience will be called for an interview.

How to Apply

1. Fill out the application form available on the Career page of People’s Bank website (www.peoplesbank.lk).

2. Submit the application through the website on or before 09.11.2026.

3. An email confirmation of receipt will be sent upon submission (if not received within a reasonable period, inquiries can be made via telephone numbers 011 3741421 / 011 3741420).

• Note: All applications will be treated in strict confidentiality. Canvassing in any form will be a disqualification.