Operational Risk Manager - Finance IT, GFT

RBC•Halifax, NS

8d•Onsite

About The Position

In this hands-on technical role, you will support and provide technology risk control and advisory services to Finance & Audit Technology and CFO Group management. Services include IT & operational risk analysis, risk & compliance reporting, risk awareness & advisory and audit liaison. You will assess and manage to ensure on-going compliance with rapidly evolving technology management policies & standards. Including automation, data analysis, and reporting. You will be a member of the Finance IT Operational Risk Management team which is collectively responsible for provision of technical services, IT operations engineering, production support, quality engineering, Risk Management and business management across a portfolio of over 100 production applications. You will have ample opportunity to develop your professional skills and positively influence technology risk practices across RBC’s Global Functions Technology (GFT) group.

Requirements

Degree level education plus a relevant qualification in risk & information systems control (e.g. CRISC) or cybersecurity (e.g. CISSP) or (e.g. CISA)
Deep IT technical knowledge and experience covering: operating systems (e.g. Unix, Windows, zOS); database systems (e.g. Oracle, SQL Server, Sybase, DB2) and software security architectures
Knowledge of MS Suite of Apps
Passion for technology risk management and a desire to continually develop personal and team knowledge
Thorough understanding of IT service management frameworks such as ITIL or COBIT
Experience managing multiple projects or internal service delivery, including service level management, process design and skills development planning
Excellent written & verbal communication skills, with the ability to convey complex technical concepts to general IT and business managers

Nice To Haves

Post graduate qualification in computing or cybersecurity or Information technology
Internal or external IT audit qualification and experience; Operational Risk Management
Familiarity with DevOps & Cloud concepts, processes and tooling, ORM Framework, Audit; Access and change management processes; SOX/SOC1

Responsibilities

Identify and assess IT & operational risks across a large & diverse portfolio of applications, 40% of which are subject to stringent SOX & SOC1 control standards
Test Controls and document results/conclusions specific to MRA requests, Bank examinations, and/or any Regulatory requests
Monitor and report on risk exposures, including leading Archer approval Findings meetings that are hosted by the VP, Global Head of Finance IT Support Finance IT Director and SMT management on the appropriate treatment of technology risks
Raise awareness of IT & operational risk, including design and roll-out of tailored IT risk education programs
Develop an understanding of best risk & control practices by maintaining a professional network across specialist teams such as Cyber Security, Group Risk Management and Internal Audit; act as Finance IT’s ‘point of contact’ for these teams
Manage Finance IT’s Enhanced Compliance Program (ECP), a major internal IT-driven initiative to drive compliance with current and emerging IT policy & standards.
Contribute to the development of IT risk competencies, practices and outcomes across GFT