Senior Director, Cyber and Technology Risk – Business Segments

Royal Bank of Canada•Toronto, ON

16h•Onsite

About The Position

The Senior Director, Cyber and Technology Risk Management is responsible for leading governance and oversight of the cyber and technology risk management practices across RBC’s business segments (P&CB, WM, Functions, Insurance) and Caribbean region operations. Responsible for independent risk management governance activities including regional risk appetite, enhancing, and evolving segments governance documents, providing oversight and challenge of the first line of defense risk management activities, and owning IT risk appetite across business segments (P&CB, WM, Insurance, Functions) and Caribbean region.

Requirements

Undergraduate degree in business / Computer Science
A minimum of 15 years of experience in progressively responsible IT risk management roles in a global financial services organization
Extensive experience in Technology and Cyber space ( 1LOD, 2 LOD, 3 LOD)
Solid understanding of a Banking business functions
Strong leadership skills
Board and Senior Management presentation skills
Experience working with regulators
Strategic mindset, with excellent knowledge and understanding of the financial industry.
Highly developed ability for conceptual thinking
Excellent communication and presentation skills
Well-developed impact and influence skills
Proven track record of building strong relationships across business functions.

Nice To Haves

15+ years of experience in the financial services sector
Experience in an independent risk management role

Responsibilities

Oversee IT risk management practices covering all facets of the IT Risk Framework (including Cyber Security), provide interpretation and counsel on policies, and challenge existing risk management practices in RBC’s business segments and across Caribbean operations.
Develop and set the vision for IT and Cyber Risk management in the US aligned with the Operational Risk strategy.
Ensure enterprise-wide policies meet the diverse requirements of the region provide assurances of compliance while minimizing adverse impact to business operations.
Lead, contribute and/or support the execution of IT Risk management program across all US entities.
Provide leadership and challenge the first line of defence within each business platform to ensure the IT and Cyber Risk is managed within risk appetite.
Contributes to creation / updates of policies and standards for Cyber and Technology Risk
Supports the development of business specific risk appetite statements and measures.
Provide IT Risk policy interpretation to first line of defence and advise them on the development of procedures and guidelines that align with policy / standards to ensure key risks are mitigated.
Develop and establish effective monitoring practices to ensure adherence to the IT risk management framework and policy and assist business in the identification of issues.
Advise and collaborate with IT and business leadership on appropriate ways to strengthen controls in non-compliant areas.
Advise and assist first line of defence in IT Risk mitigation planning activities.
Ensure that the IT Risk Profile is fairly presented through ongoing reporting and escalation to senior management when the IT Risk Profile is at or near the defined Enterprise Risk Appetite.
Lead a team of senior cyber and technology risk professionals and drive a culture of integrity in line with RBC’s code of conduct.
Foster strong stakeholder relationships to enable active and collaborative working relationships.
Represent the global Cyber and Technology Risk team across business segments and Caribbean region
Act as a coach and mentor for the broader global team
Provide thought leadership on all aspects of Cyber and Technology Risk management.