Senior Analyst, IT Control Quality Assurance (Global Security)

RBC•Toronto, ON

28d•Hybrid

About The Position

The Senior Analyst, IT Controls QC is a key contributor within the independent quality control function focused on ensuring IT control testing is complete, consistent, and audit ready. This role executes hands-on QC reviews of IT control testing workpapers and evidence, identifies testing quality gaps, and partners with test teams to drive timely remediation. The Senior Analyst also supports continuous improvement by helping maintain QC checklists, trackers, and associated governing documents/playbooks.

Requirements

Bachelors' degree in information systems, computer science, accounting, finance, engineering, or related field.
Over four years of experience testing or performing quality control of IT controls preferably within financial services industry.
Experience or understanding of IT risk management practices in financial services industry.
Proficient at written and oral communication skills to effectively and timely communicate with the stakeholders.
Analytical and rationale thinking, supported by strong writing skills, are essential to document and communicate the quality control work.
Ability to understand the stakeholders’ expectations for information/communication.
A strong understanding of technology and/or financial services industry.
Knowledge of FINRA, SEC, MSRB, FRBNY and OCC rules and regulations.
Deadline-driven and results-oriented; able to meet consistently high-quality standards while handling a variety of tasks and deadlines simultaneously.

Nice To Haves

CRISC - Certified in Risk and Information Systems Control, CISA – Certified Information Security Auditor, CISSP - Certified Information Systems Security Professional.
Risk and Control management knowledge and industry experience across Information Technology (IT) domains.
Working experience in cybersecurity and/or IT risk management spaces.
Big 4 IT risk consulting and/or audit experience.

Responsibilities

Execute independent QC review of IT control testing across all domains including: access management, change management, IT operations, secure coding, and more.
Identify deficiencies in testing quality and documentation.
Drive timely remediation and rework with clear requirements and deadlines.
Work alongside Test Performers and Test Leads to correct any QC observations.
Review 1LOD responses to 2LOD or 3LOD inquiries and observations.
Ensure workpaper updates are consistent with responses to review & challenge.
Use and reinforce enterprise Testing/QC standards.
Provide feedback to improve QC tools: checklists, tracker, process documentation.
Suggest examples of “what good looks like” and standard language for common observations.
Assist with maintaining consistency across testers and domains.
Maintain a thorough understanding of the organization's governing policies and standards, IT control testing methodologies, and related regulatory and compliance standards.
Identify repeat observations which could lead to thematic guidance or training opportunities.
Identify opportunities to reduce rework via changes to documentation, procedures, or templates.
Execute QC controls as directed by management.
Ensure QC artifacts and evidence are properly managed and store on internal sites or within enterprise tools to ensure proper traceability and retention.

Benefits

bonuses
flexible benefits
competitive compensation
commissions
stock where applicable
Leaders who support your development through coaching and managing opportunities
Ability to make a difference and lasting impact
Work in a dynamic, collaborative, progressive, and high-performing team
A world-class training program in financial services
Flexible work/life balance options
Opportunities to do challenging work