Senior Manager SaaS Security (Global Security)

RBC

4d

About The Position

What is the opportunity? We have an exciting opportunity in RBC’s Global Security to lead the implementation and operation of brand-new security capabilities protecting third-party Software-as-a-Service (SaaS) tools. As Senior Manager SaaS Security, we are looking to you as an experienced cybersecurity leader to help build a comprehensive SaaS Security program. You will leverage new and existing security technologies and controls to defend RBC from risk, analyze SaaS configurations for potential weaknesses and vulnerabilities, and respond to security events. You will analyze trends, develop strategies, and help implement bank-wide improvements to defend RBC’s digital footprint in the SaaS space. What will you do? Lead Key Control Testing, Risk, and Compliance Initiatives: Oversee the design, implementation, testing and continuous improvement of key SaaS security controls to ensure compliance with internal and external security standards. Investigate, analyze, and report on SaaS configurations and security events using a variety of security tools to identify risks, support incident investigations, and protect the bank’s digital footprint Monitor and manage SaaS risk remediation requirements from internal and external security assessments, vulnerability reports, audit findings, and identified security gaps. Develop and maintain metrics to measure the effectiveness of SaaS Security initiatives, communicating their impact to stakeholders Collaborate and Influence Across Teams: Partner with diverse stakeholders, including technology teams, risk leads, 2LOD, 3LOD, and 3rd party suppliers to drive SaaS Security transformation initiatives. What do you need to succeed? Must-have 5+ years of experience managing key control testing, risk, and compliance initiatives Experience with SaaS and cloud-security concepts and tools (e.g., CASB, SSPM). Bachelor’s degree in Computer Science, Business, or related discipline, or a comparable combination of training, experience, and education. Demonstrated expertise in vulnerability management, including strong knowledge of security frameworks, governance practices, and vulnerability assessment methodologies Strong leadership and project management skills, with a proven ability to lead and deliver complex projects Exceptional communication, presentation and collaboration skills, with the ability to effectively communicate to diverse audiences, including senior leadership A relentless curiosity and enthusiasm for staying ahead of the curve in the ever changing world of cybersecurity Nice-to-have Cybersecurity certifications (e.g., CRISC, CISSP, CCSP, CISM, CRISC, GCIH). Hands on experience with vulnerability scanning tools Hands on experience with JIRA, Confluence, and ServiceNow What’s in it for you? We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual. A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable Leaders who support your development through coaching and managing opportunities Ability to make a difference and lasting impact Flexible work/life balance options Opportunities to take on progressively greater accountabilities Access to a variety of job opportunities across business and geographies

Requirements

• 5+ years of experience managing key control testing, risk, and compliance initiatives
• Experience with SaaS and cloud-security concepts and tools (e.g., CASB, SSPM).
• Bachelor’s degree in Computer Science, Business, or related discipline, or a comparable combination of training, experience, and education.
• Demonstrated expertise in vulnerability management, including strong knowledge of security frameworks, governance practices, and vulnerability assessment methodologies
• Strong leadership and project management skills, with a proven ability to lead and deliver complex projects
• Exceptional communication, presentation and collaboration skills, with the ability to effectively communicate to diverse audiences, including senior leadership
• A relentless curiosity and enthusiasm for staying ahead of the curve in the ever changing world of cybersecurity

Nice To Haves

• Cybersecurity certifications (e.g., CRISC, CISSP, CCSP, CISM, CRISC, GCIH).
• Hands on experience with vulnerability scanning tools
• Hands on experience with JIRA, Confluence, and ServiceNow

Responsibilities

• Oversee the design, implementation, testing and continuous improvement of key SaaS security controls to ensure compliance with internal and external security standards.
• Investigate, analyze, and report on SaaS configurations and security events using a variety of security tools to identify risks, support incident investigations, and protect the bank’s digital footprint
• Monitor and manage SaaS risk remediation requirements from internal and external security assessments, vulnerability reports, audit findings, and identified security gaps.
• Develop and maintain metrics to measure the effectiveness of SaaS Security initiatives, communicating their impact to stakeholders
• Partner with diverse stakeholders, including technology teams, risk leads, 2LOD, 3LOD, and 3rd party suppliers to drive SaaS Security transformation initiatives.

Benefits

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable
• Leaders who support your development through coaching and managing opportunities
• Ability to make a difference and lasting impact
• Flexible work/life balance options
• Opportunities to take on progressively greater accountabilities
• Access to a variety of job opportunities across business and geographies

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees