Senior Manager, IT Operational Risk Management

RBC • Toronto, ON

5d • Onsite

About The Position

The Senior Manager, IT Operational Risk Management role is a key strategic and integral role for the overall success of governance risk and compliance management within Core Platform Services (CPS). This dynamic position provides opportunities for working across the organization to deliver complex enterprise-wide initiatives as part of RBC’s ongoing plan to improve IT Risk Management and governance. The role will plan, coordinate, communicate, and execute activities to ensure that the team’s objectives are consistently accomplished.

Requirements

• Bachelor’s degree in engineering, computer science or related fields.
• Industry recognized qualifications and certifications in Information Security and/or Risk Management (CISA/CISSP /CRISC/CISSP)
• 5+ years of technology domain experience in information technology, risk management or risk assurance in the financial services industry.
• Knowledge of IT Risk frameworks, methodologies and industry standards related to IT and Cyber Risk management, including emerging trends and issues.
• Working knowledge of key infrastructure at RBC, including good understanding of the risks associated with the platforms.
• Maturity level and skill/judgment to be able to deal effectively with senior management and operational risk groups throughout the organization.
• Good communication (verbal and written) skills, including strong appreciation of relationship management; sound problem solving, analytical, research, and quantitative skills.
• Demonstrated expertise in a broad range of Information Security and Risk Management principles and practices.
• A strong understanding of technology and/or financial services industry.
• Deadline-driven and results-oriented; able to meet consistently high-quality standards while handling a variety of tasks and deadlines simultaneously.
• People management and leadership skills.

Nice To Haves

• Risk and Control management knowledge and industry experience across Information Technology (IT) domains.
• Working experience in cybersecurity and/or IT risk management spaces
• IT risk consulting and/or audit experience
• Self-discipline and organized with proven time management skills.

Responsibilities

• Support the remediation of regulatory and compliance gaps, including the creation and maintenance of artifacts related to departmental regulatory compliance, such as process documentation, narratives, and metrics.
• Monitor CPS deliverables to meet milestones and timelines, identify and escalate potential issues and risks as applicable.
• Perform complex internal control monitoring and investigation across Core Platform Services department, supporting various infrastructure technologies/domains within CPS while adhering to established schedules.
• Participate in the internal control monitoring process including evaluating risk, identifying mitigating controls, developing conclusions, and compiling reports.
• Recommend changes and/or enhancements to existing processes and procedures.
• Assist with the control testing process that evaluates the test of design effectiveness of CPS controls.
• Coordinate with stakeholders to log and manage control deficiencies.
• Assess remediation plans and corrective actions to ensure that they are designed to reduce risk.
• Verify that control deficiencies are remediated according to the remediation plans.
• Maintaining a thorough understanding of RBC and CNB’s policies and standards, IT control testing methodologies as well as related regulatory and industry compliance standards, as they relate to CPS.
• Champion a thorough understanding of RBC’s Internal Controls Management Policy (ICMP) and control testing methodologies.
• Manage multiple priorities in a fast-paced environment.
• Identify, de-escalate, and manage actual or perceived conflict, if any, among your team or with the stakeholders.
• Assess complex scenarios and use your subject matter expertise and professional judgement to make decisions with proper rationale and documentation.
• Support your team member during complex or tough discussions with stakeholders to achieve the desired outcome.
• Exhibit high attention to detail and strategic thinking in analyzing, aggregating, and articulating the results/issues of control testing activities and value-add opportunities for improvement of Key Controls to Director of Operational Risk Management (CPS) and other stakeholders as needed.
• Establish strong working relationships with the stakeholders across business units and teams to build trust and act as a trusted advisor.
• Provide subject matter expertise to advise the stakeholders on control documentation and testing in compliance with policies and standards.
• Keeping abreast of external cyber security trends, technologies and cyber risk management approaches, control hygiene of the environment, and often collaborate with other teams on IT risk-related initiatives to provide subject-matter recommendations and guidance to achieve a risk posture within the organization’s overall risk appetite.

Benefits

• A progressive career path in technology risk management and cyber security risk management.
• A comprehensive Total Rewards Program including bonuses and flexible benefits, and competitive compensation.
• Leaders who support your development through coaching and managing opportunities
• Ability to make a difference and lasting impact.
• Work in a dynamic, collaborative, progressive, and high performing team.
• A world-class training program in financial services

What This Job Offers

• Job Type: Full-time
• Career Level: Senior