Job Summary
Job Description
What is the opportunity?
IT Risk Reporting & Insights consist of IT Risk Reporting Team and IT Risk Metrics team, under RBC's Group IT Risk. We are focused on the strategic delivery of the harmonization of risk reporting and metrics across our regions, while accelerating our governance and risk management practices.
This includes the strategic design and development of metrics, evolution of reporting to prioritize standardization and the ability to enable proactive risk management in an environment that is growing in complexity and size.
The opportunity is open for 2 new members in IT Risk Reporting Team, and also 2 new members in IT Risk Metrics team to be based in Toronto and / or Vancouver.
Candidates will be considered for both Risk Metrics and Risk Reporting.
What will you do?
Metrics Development
Maintain and complete routine activities that enable strong governance of the risk metrics, supporting the development, implementation, and maintenance of Operational Risk metrics and IT Risk metrics.
Leverage the RBC Risk Management Framework to assess and identify opportunities to increase coverage of IT risk metrics as necessary.
Develop both metrics for Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs) that meet regulatory requirements, RBC Key Risks & Key Controls, RBC standard and Industry's best practices.
Metrics Insights & Maintenance
Develop strong relationships with diverse stakeholders across the Enterprise, focus on collaboration and alignment for both metrics and reporting
Lead the monthly assessment of metrics, including QA activities, variance analysis and summarization of insights with results to be distributed to relevant stakeholders
Analyze trends, causes and variances of various dataset for metrics
Investigate and respond to inquiries related to the metrics
Reporting
Support the design, development and implementation of standardized reports that are consistent across regions leveraging the risk framework
Creation of regular and periodic reporting for all regions, including detailed analysis to be provided to Senior Management
Partner with stakeholders to complete analysis for reporting, understanding breached metrics, impact, and overall IT risk
Develop strong relationships with diverse stakeholders across the Enterprise, focus on collaboration and alignment for both metrics and reporting
Reporting & Metrics Governance
Conduct current state assessments, including gap analysis when required, creating recommendations to reach desired target state
Support the overall governance practices for both metrics and reporting, including creating, maintaining, and uplifting process and procedural documentation
Develop materials to support the monthly Enterprise IT Risk Metrics Clinic; capturing insights and results of the metrics each month
Educate stakeholders (including Risk Leads, 2LOD and when needed, 3LOD) about the RBC IT Risk metrics : how they are calculated, related RBC process and standards, impact of the resulting threshold, etc.
What do you need to succeed?
Must-have
University degree or equivalent experience in Business, Accounting, Computer Science, Engineering or Finance
Must have experience and knowledge related to Risk Management, ideally in IT Risk
Great communication (verbal and written) skills, including strong appreciation of relationship management
Excellent formal documentation skills for procedural & process documentations and power point creation for reporting
Ability to use a systematic approach to solving problems through high attention to detail, analysis, and evaluation of alternative solutions through qualitative analysis and research
Skilled in managing large quantities of data and fluent using a variety of tools (Excel VBA, Python, SQL)
Experience with data visualization and reporting tools, including Tableau and PowerBI
Passionate about IT Risk Management and data analytics
Nice-to-have
One or more related professional designations such as CRISC, CISA, CISM, CISSP obtained or in progress
Familiar with Operational Risk Management principals
Experience with designing and implementing ETL processes
Experience with database design and scripting, including SQL and Snowflake
Familiar with Archer, ServiceNow, JIRA, PowerShell
Audit and / or risk consulting past working experience, ideally in highly regulated industries such as finance, healthcare or insurance
What's in it for you?
We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper.
We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.
A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable.
Leaders who support your development through coaching and managing opportunities.
Ability to make a difference and lasting impact.
Work in a dynamic, collaborative, progressive, and high-performing team.
Flexible work / life balance options.
Opportunities to do challenging work.
Opportunities to take on progressively greater accountabilities.
Opportunities to building close relationships with clients.
LI-Hybrid
LI-POST
TECHPJ
Job Skills
Communication, Control Assessment, Data Analytics, Data Governance, Data Oriented, Detail-Oriented, Documentations, Information Technology (IT) Risk Management, Information Technology General Controls (ITGC), IT Risk Assessments, Key Risk Indicators, Microsoft Excel, Microsoft PowerPoint, Risk Reporting
Senior Manager, IT Risk (GCS)
Keeping abreast of external cyber security trends, technologies and cyber risk management approaches, control hygiene of the environment, and often collaborate with other teams on IT risk-related initiatives to provide subject-matter recommendations and guidance to achieve a risk posture within the ...
Senior Business Analyst to work on the IT Service Management Project.
Senior Business Analyst to work on the IT Service Management Project. The project’s primary objective is to replace the current IT Service Management (ITSM) tool with an Enterprise Service Management Tool. ...
Senior Manager - IT Audit, Technology Risk Services
Successful candidates will be a senior part of a team that is closely aligned with both our Advisory and Audit practices and will manage the detailed day-to-day planning and execution of IT Audit and Advisory services to exceed our clients' expectations. We are looking for a dynamic professional to ...
IT GRC Risk Management Analyst
Assist the Senior Manager, Information Security Compliance in developing and implementing a strategic approach to information security risk management across people, process, and technology. Advise various teams on risk mitigation and compensatory measures to reduce risks to acceptable levels, using...
Senior Consultant, Technology Risk Services - IT Audit
Conduct assessments of IT risks and controls, including general IT controls and automated controls embedded within information systems in support of our external audit engagements. Some understanding of business risks, IT risks, and audit risks. Assist KPMG Audit teams in both audit of technology an...
Senior Business Systems Reporting Analyst
Be a reliable point of contact for change management processes and initiatives assigned, and highlight escalate risks to appropriate team(s) (Local Senior Business Technology Members, Finance Team, IT infrastructure, Product/Project Manager, Vendor, Steering Committee). Excellent written and oral co...
Senior Manager - IT Risk Services
The successful candidate will focus primarily on performing IT risk reviews, performing tech advisory engagements or providing IT internal audit support across the IT risk domain. Engagement risk management: quality assurance through file review, engagement planning, development and monitoring, enga...
Senior Business Analyst to support IT Resiliency & Cyber Security programs RFC-2024-010
Senior Business Analyst to support on IT Resiliency & Cyber Security programs. ...
Senior Risk and Compliance Specialist (GCS)
The Senior Risk and Compliance Specialist will provide technical expertise, consulting and advisory on risk and compliance for a suite of applications for the Endpoint Security Management and Operations teams within RBC's Global Cyber Security environment. In addition, you will be responsible for cr...
Senior IT Risk and Security Consultant to perform an assessment of infrastructure, processes, controls, policies, and security of the IT department and deliver a report on findings, gaps and recommendations for mitigating risk to the organization.
Our public sector client is seeking a Senior IT Risk and Security Consultant to perform an assessment of infrastructure, processes, controls, policies, and security of the IT department and deliver a report on findings, gaps and recommendations for mitigating risk to the organization. The hydro faci...