Job Summary
Job Description
WHAT IS THE OPPORTUNITY?
RBC Global IT Risk (GITR) team enables the protection of RBC's brand, systems, and operations by equipping business and technology partners with meaningful insights, advice, and information on RBC IT & cyber risks.
The Senior Cyber Security and IT Risk Management Analyst will perform risk-based testing activities that independently evaluate the design and effectiveness of IT controls and further assist with the enhancement and execution of the IT Control Testing and Monitoring.
This role will primarily support the identification and mitigation of IT and regulatory risks and operational issues and will also assist in the maintenance of operational and IT control procedures.
This is an advanced senior professional with wide- ranging experience who uses professional concepts to resolve complex issues.
Serves as an expert in their own discipline or area of specialization. This dynamic position provides opportunities for working across the organization.
WHAT WILL YOU DO?
Executing control testing to evaluate the design and operating effectiveness of IT controls. Documenting test work adhering to the quality standards, procedure, and industry best practices.
Analyzing, aggregating, and articulating the results, issues, and recommendations related to control testing activities.
Participate in all phases of the internal control monitoring process including planning, testing, evaluating risk, identifying mitigating controls, developing conclusions, writing reports, and maintaining work papers.
Coordinate with stakeholders to log and manage control deficiencies. Assess remediation plans and corrective actions are reasonably designed to reduce risk.
Verify control deficiencies are remediated according to the remediation plans.
Establish strong working relationships with the stakeholders across business units and teams to build trust and act as trusted advisor.
Perform as a subject matter expert to advise stakeholders on control documentation and testing in compliance with policies and standards.
Maintaining thorough understanding of organization's governing policies and standards, IT control testing methodologies, and related regulatory and compliance standards
Keeping abreast of external cyber security trends, technologies and cyber risk management approaches, control hygiene of the environment, and often collaborate with other teams on IT risk-related initiatives to provide subject-matter recommendations and guidance to achieve a risk posture within the organization's overall risk appetite.
WHAT DO YOU NEED TO SUCCEED?
Must have :
Bachelors' degree in computer science, engineering, or related field. Preferred Certifications : CRISC - Certified in Risk and Information Systems Control, CISA - Certified Information Security Auditor, CISSP - Certified Information Systems Security Professional.
Over five-year experience of testing IT controls preferably within financial services industry. Experience or understanding of IT risk management practices in financial services industry.
Proficient at written and oral communication skills to effectively and timely communicate with the stakeholders. Analytical and rationale thinking, supported by strong writing skills, are essential to document and communicate the test work.
Ability to understand the stakeholders' expectations for information / communication.
A strong understanding of technology and / or financial services industry. Knowledge of FINRA, SEC, MSRB, FRBNY and OCC rules and regulations.
Deadline-driven and results-oriented; able to meet consistently high-quality standards while handling a variety of tasks and deadlines simultaneously.
Nice-to-have :
Risk and Control management knowledge and industry experience across Information Technology (IT) domains
Working experience in cybersecurity and / or IT risk management spaces
Big 4 IT risk consulting and / or audit experience
RBC is committed to supporting flexible work arrangements when and where available. Details to be discussed with Hiring Manager.
What's in it for you?
We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper.
We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.
A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable
Leaders who support your development through coaching and managing opportunities
Ability to make a difference and lasting impact
Work in a dynamic, collaborative, progressive, and high-performing team
A world-class training program in financial services
Flexible work / life balance options
Opportunities to do challenging work
LI-Hybrid
LI-POST
TECHPJ
Job Skills
Business Continuity Disaster Recovery, Cyber Security Management, Firewall Management, Information Technology (IT) Risk, IT Network Security, IT Standards, Problem Management, Process Management, Risk Assessments, Technical Writing, Threat Management
IT Technical Business Analyst - Senior
On behalf of our government client in Edmonton, Procom is searching for an IT Technical Business Analyst for a 5 month remote contract with occasional travel to Edmonton for meetings. IT Technical Business Analyst - Senior Job Details. IT Technical Business Analyst. ...
Senior IT Risk Analyst (GCS)
The Senior Cyber Security and IT Risk Management Analyst will perform risk-based testing activities that independently evaluate the design and effectiveness of IT controls and further assist with the enhancement and execution of the IT Control Testing and Monitoring. Keeping abreast of external cybe...
Manager/Senior Manager, Technology Risk Services - IT Audit
IT risk assessments, General IT Controls, IT Application Controls, large System Implementations and Data Conversions) in support of financial statement audits and internal controls over financial reporting. Planning, managing, and completing IT Audit project tasks including liaising with client and ...
Senior Manager, IT Risk (GCS)
Keeping abreast of external cyber security trends, technologies and cyber risk management approaches, control hygiene of the environment, and often collaborate with other teams on IT risk-related initiatives to provide subject-matter recommendations and guidance to achieve a risk posture within the ...
Senior Analyst Middle Office and Treasury Risk
Capital Markets Communication Compliance Diversity & Inclusion Empathy Initiative Learning Agility Market Risk Market Risk Management P&L Management Raw Materials Resiliency Teamwork Trade Risk Traded Market Risk. As a Senior Analyst in Middle Office in Capital Markets and Treasury Risk Mana...
Senior Manager - IT Audit, Technology Risk Services
Audit and assessment of IT governance, risks, and controls in a range of areas, such as:IT planning and organizationIT project risks and controlsGeneral IT controls (, access, system development, change, and operations controls)Business process controls, including application and interface controlsD...
Senior Consultant - Technology Risk Services (IT Audit)
Ability to identify and evaluate business, IT and audit risks - you understand financial reporting, compliance, audit risks and their IT components. KPMG's Technology Risk Services (TRs) services assist our clients to effectively identify, evaluate, and care for a broad range of opportunities, risks...
Senior Technical Systems Analyst (GCS)
The ideal candidate is passionate about technology and cybersecurity with experience in Identity and Access Management (IAM) and direct knowledge and experience with the configuration and deployment of large scale enterprise solutions including infrastructure, application, and vendor support service...
Senior Financial Analyst Risk Oversight & Compliance
Experience with developing risk metrics including VaR, stress testing, and scenario analysis as well as familiarity with risk appetite framework. Establish and enhance risk profiles and thresholds for the various Group entities and risk exposures, and monitor related key risk indicators. If accepted...
Senior Manager - IT Audit, Technology Risk Services
Successful candidates will be a senior part of a team that is closely aligned with both our Advisory and Audit practices and will manage the detailed day-to-day planning and execution of IT Audit and Advisory services to exceed our clients' expectations. We are looking for a dynamic professional to ...