Senior Manager, Cybersecurity & IT Risk, CNB Internal Audit

RBC • Toronto, ON

2d • Onsite

About The Position

Plan, lead and execute on the annual Audit Plan for the CNB IT Cybersecurity and Infrastructure audit universe, ensuring that audits conform to local and global regulatory and internal audit requirements. Supervise and implement the execution of the audit plan and ensure effective audit practices for traditional and continuous audits. Collaborate with broader Global RBC and Combined U.S. Operations (CUSO) IT teams and departments to achieve the plan (where needed). Make recommendations to clients on control deficiencies and follow up to ensure significant deficiencies are corrected. Assist business management to develop appropriate action plans to address identified deficiencies, and ensure corrective actions are implemented in a timely manner to effectively address the issues. Plan and execute complex and confidential/special audit projects enterprise wide as requested by senior management of the Bank. Manage relationships with CNB senior leadership, external auditors, and US regulators, serving as the primary liaison for IT audit and cybersecurity matters, and ensuring timely, professional communication of findings and remediation status. Communicate trends in risk and control issues to senior management on the results of ongoing reviews of the businesses that are key relationships, or any other business as requested. Provide support for CNB IT and US-wide regulatory requests, responses and meetings. Build, direct, counsel, and instruct staff assigned to an engagement and review audit plan, findings and reports for sufficient scope and for accuracy. Champion the adoption and application of data analytics and continuous auditing tools such as AI within the IT audit function, including designing audit programs that leverage data analytics and AI to enhance audit scope and effectiveness.

Requirements

• Bachelor's degree or equivalent.
• Minimum 7 years banking / audit experience within Information Technology, with Cybersecurity and Infrastructure audit experience, including in-depth knowledge of financial services banking technology and related risks (e.g. cloud technologies, IT operations, data center services, storage & databases, server virtualization, cybersecurity operations, data privacy, data protection, cryptography, data loss prevention).
• Minimum 5 years of business experience in a financial institution or technology company, dealing with multiple business platforms, business processes, geographies, and legal entities.
• Minimum 5 years of Audit experience (strategic planning through reporting) in a senior leadership role with a current working knowledge of Internal Audit practices, policies, procedures and systems and the ability to oversee audits and oversee audit staff work.
• CISA, CISM, CISSP and/or CIA designation.
• Experience presenting technical and control findings to non-technical executive audiences (Board, Audit Committee, senior management)

Nice To Haves

• Familiarity with CNB's business model, US banking regulations and industry best practices, or previous Big 4 audit experience
• Experience managing cross-functional or matrix teams across geographies
• Experience with data analytics including developing predictive hypotheses, directing data scientists, interpreting data extracted from Advanced Analytics (e.g. use of data visualization and reporting), and in incorporating analytics into the traditional audit programs and continuous auditing.

Responsibilities

• Plan, lead and execute on the annual Audit Plan for the CNB IT Cybersecurity and Infrastructure audit universe.
• Supervise and implement the execution of the audit plan and ensure effective audit practices for traditional and continuous audits.
• Collaborate with broader Global RBC and Combined U.S. Operations (CUSO) IT teams and departments to achieve the plan (where needed).
• Make recommendations to clients on control deficiencies and follow up to ensure significant deficiencies are corrected.
• Assist business management to develop appropriate action plans to address identified deficiencies, and ensure corrective actions are implemented in a timely manner to effectively address the issues.
• Plan and execute complex and confidential/special audit projects enterprise wide as requested by senior management of the Bank.
• Manage relationships with CNB senior leadership, external auditors, and US regulators, serving as the primary liaison for IT audit and cybersecurity matters, and ensuring timely, professional communication of findings and remediation status.
• Communicate trends in risk and control issues to senior management on the results of ongoing reviews of the businesses that are key relationships, or any other business as requested.
• Provide support for CNB IT and US-wide regulatory requests, responses and meetings.
• Build, direct, counsel, and instruct staff assigned to an engagement and review audit plan, findings and reports for sufficient scope and for accuracy.
• Champion the adoption and application of data analytics and continuous auditing tools such as AI within the IT audit function, including designing audit programs that leverage data analytics and AI to enhance audit scope and effectiveness.

Benefits

• bonuses
• flexible benefits
• competitive compensation
• Leaders who support your development through coaching and managing opportunities
• Opportunities to do challenging work
• Flexible work/life balance options

What This Job Offers

• Job Type: Full-time
• Career Level: Senior