About the Role
The IT and Cyber Risk Senior Manager supports the management of technology and cyber risk for Commercial & Payment Technology (CPT) and RBC Clear. This role involves collaborating with cross-functional teams to identify, assess, and mitigate technology risk profiles, monitor compliance metrics, and promote risk awareness within CPT.
Responsibilities
- Identify, assess, recommend and monitor mitigation of technology risk profiles within RBC Clear and across the CPT portfolio
- Monitor and report on risk, technology, and security compliance metrics
- Lead initiatives to promote risk, security, and compliance awareness
- Collaborate with cross-functional risk teams to ensure applications adhere to established compliance thresholds and maintain a strong security posture
- Analyze areas of perceived elevated or emerging cyber risks, recommending mitigation strategies and escalating where required
- Manage Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs) related to IT security and technology risks
- Support technology leads and application custodians in technology risks and compliance to ensure health of risk profile
- Assist in supporting project teams with risk assessments related to technology and cyber
- Monitor vulnerability management reporting, server hygiene, and penetration test vulnerabilities and ensure application teams remain compliant with RBC security requirements
- Prepare and present risk dashboards, reports, and metrics to senior management and governance forums on IT risk and cyber security
- Oversee and drive the implementation of risk mitigation plans, control enhancements, and issue remediation related to technology and cyber risks
- Lead risk and control assessments to ensure compliance with RBC's IT risk management practices and programs
- Liaise/participate in internal/external – servicing audit requests, understanding gaps identified, monitoring remedial efforts to ensure timely completion.
Requirements
- Extensive experience in operational risk management, risk assessments, and leadership
- Strong knowledge and experience of risk and control assessment processes, risk protocols, regulatory compliance, and industry best practices for risk management
- Professional technology risk designations (e.g. CISA, CRISC, CISSP) and university graduate or equivalent
- Strong understanding of banking operations, financial services regulatory landscape, and relevant technology
- Excellent communication, problem-solving, details oriented, strong analytical skills and self-organized with proven time management skills
- Strong influencing, collaboration, and relationship-building skills, with an inquisitive nature and comfort challenging current practices.
- Experience with Archer, SharePoint, and collaboration tools (e.g. JIRA and Confluence) with expertise in MS Office (Excel and PowerPoint)
- Familiarity with RBC's organization and culture
- Knowledge of RBC businesses and products.
- Strategic thinking with excellent communication skills across management at all levels of seniority
Skills
- Critical Thinking
- Cyber Security Management
- Decision Making
- Detail-Oriented
- Information Security Management
- Information Technology Security
- Interpersonal Relationship Management
- IT Security Architecture
- Performance Management (PM)
Location
- RBC CENTRE, 155 WELLINGTON ST W:TORONTO
- Toronto
- Canada
Work Type
- Full time
Education Level
- university graduate or equivalent
Benefits
- Competitive compensation
About the Company
- At RBC, we are guided by living shared values of Client First, Integrity, Collaboration, Respect and Excellence and winning together as One RBC.
- We believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world.
- Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities.
- RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.
