Senior Manager, Cybersecurity & IT Risk, CNB Internal Audit

Royal Bank of Canada•Toronto, ON

4d•Onsite

About The Position

This role is responsible for planning, leading, and executing the annual Audit Plan for the CNB IT Cybersecurity and Infrastructure audit universe, ensuring compliance with local and global regulatory and internal audit requirements. The position involves supervising the execution of the audit plan, implementing effective audit practices for traditional and continuous audits, and collaborating with broader Global RBC and Combined U.S. Operations (CUSO) IT teams. Key responsibilities include making recommendations on control deficiencies, assisting business management with action plans, and ensuring timely corrective actions. The role also entails planning and executing complex and confidential audit projects, managing relationships with senior leadership, external auditors, and US regulators, and serving as the primary liaison for IT audit and cybersecurity matters. Additionally, the Senior Manager will communicate risk trends to senior management, provide support for regulatory requests, build and direct audit staff, and champion the adoption of data analytics and AI within the IT audit function.

Requirements

Bachelor's degree or equivalent.
Minimum 7 years banking / audit experience within Information Technology, with Cybersecurity and Infrastructure audit experience, including in-depth knowledge of financial services banking technology and related risks (e.g. cloud technologies, IT operations, data center services, storage & databases, server virtualization, cybersecurity operations, data privacy, data protection, cryptography, data loss prevention).
Minimum 5 years of business experience in a financial institution or technology company, dealing with multiple business platforms, business processes, geographies, and legal entities.
Minimum 5 years of Audit experience (strategic planning through reporting) in a senior leadership role with a current working knowledge of Internal Audit practices, policies, procedures and systems and the ability to oversee audits and oversee audit staff work.
CISA, CISM, CISSP and/or CIA designation.
Experience presenting technical and control findings to non-technical executive audiences (Board, Audit Committee, senior management)

Nice To Haves

Familiarity with CNB's business model, US banking regulations and industry best practices, or previous Big 4 audit experience
Experience managing cross-functional or matrix teams across geographies
Experience with data analytics including developing predictive hypotheses, directing data scientists, interpreting data extracted from Advanced Analytics (e.g. use of data visualization and reporting), and in incorporating analytics into the traditional audit programs and continuous auditing.

Responsibilities

Plan, lead and execute on the annual Audit Plan for the CNB IT Cybersecurity and Infrastructure audit universe, ensuring that audits conform to local and global regulatory and internal audit requirements.
Supervise and implement the execution of the audit plan and ensure effective audit practices for traditional and continuous audits.
Collaborate with broader Global RBC and Combined U.S. Operations (CUSO) IT teams and departments to achieve the plan (where needed).
Make recommendations to clients on control deficiencies and follow up to ensure significant deficiencies are corrected.
Assist business management to develop appropriate action plans to address identified deficiencies, and ensure corrective actions are implemented in a timely manner to effectively address the issues.
Plan and execute complex and confidential/special audit projects enterprise wide as requested by senior management of the Bank.
Manage relationships with CNB senior leadership, external auditors, and US regulators, serving as the primary liaison for IT audit and cybersecurity matters, and ensuring timely, professional communication of findings and remediation status.
Communicate trends in risk and control issues to senior management on the results of ongoing reviews of the businesses that are key relationships, or any other business as requested.
Provide support for CNB IT and US-wide regulatory requests, responses and meetings.
Build, direct, counsel, and instruct staff assigned to an engagement and review audit plan, findings and reports for sufficient scope and for accuracy.
Champion the adoption and application of data analytics and continuous auditing tools such as AI within the IT audit function, including designing audit programs that leverage data analytics and AI to enhance audit scope and effectiveness.