Senior Manager, Insider Risk - Asset Protection (Global Security)

Job Description

What is the Opportunity?

The Senior Manager, Insider Risk - Asset Protection (Global Security) is a critical role that r focuses on identifying, assessing, and protecting digital assets including applications across RBC.

In this position, you will ensure RBC maintains adequate logging and monitoring controls to effectively mitigate insider threats and protect against unauthorized access and misuse of sensitive data and systems.

You will work with a diverse range of stakeholders to design, implement, and validate control frameworks while maintaining independence and objectivity in your risk assessments. A key part of the role will be ongoing control reviews and oversight, engaging with technical and business teams to enhance control coverage based on the likelihood of potential exposure.

You will be responsible for ensuring risks and controls are managed, sustainable, and maintained at the highest standards. The role will also be responsible for aggregating risk reporting and metrics while socializing these across risk and governance functions.

What will you do?

• Identify insider threat vulnerabilities and control gaps across the organization, with particular focus on unauthorized access, data snooping, and non-business use of systems
• Assess the effectiveness of existing logging and monitoring controls and evaluate risk exposure related to data access, privileged user activities, and sensitive system usage
• Conduct regular reviews of higher-risk application areas (including "crown jewels") to ensure compliance with protections, policies, and standards and verify appropriate user activity logging for investigation support
• Establish baseline metrics and KRIs (Key Risk Indicators) for control effectiveness and conduct regular testing of logging systems (integrity, completeness, accuracy)
• Monitor alert thresholds, investigate control failures, and perform independent testing and validation of monitoring systems to ensure continued effectiveness
• Identify and address logging and monitoring gaps across all applications; assess risks from gaps (account takeover, unauthorized client record access) and implement strategies to mitigate
• Track and manage issues and findings to ensure timely remediation; assign clear ownership of logging responsibilities and hold stakeholders accountable for gap resolution
• Report on control performance, metrics, to risk committees, governance forums, and executive stakeholders; present risk assessments and control recommendations across different lines of business
• Collaborate with senior managers and cross-functional teams to establish consistent reporting structures and ensure standardized monitoring approaches
• Act as a trusted partner to business and application stakeholders while maintaining objectivity; develop strong relationships with risk and operational partners across the organization

What do you need to succeed?

Must have:

• Minimum 5+ years of progressive experience in risk management, control design, or internal audit within a financial institution.
• Demonstrated experience reviewing logs, identifying suspicious patterns, and validating the completeness and accuracy of logging configurations is required. You should understand log retention policies, log integrity mechanisms, and how to leverage logs for forensic investigations and incident response.
• Comprehensive understanding of data protection risks, exposures, and effective controls to mitigate them, specifically in financial services environments. This includes knowledge of data classification frameworks, access control principles, data residency requirements, and regulatory compliance obligations (PIPEDA, PCI-DSS).
• Hands-on experience with logging, monitoring, and detection technologies across enterprise applications. You should have practical knowledge of SIEM (Security Information and Event Management) platforms, log aggregation tools, and monitoring solutions.
• Demonstrated expertise in identifying control gaps, designing compensating controls, and implementing sustainable risk mitigation strategies
• Advanced proficiency in developing and maintaining risk metrics, KPIs, and performance dashboards for executive-level risk reporting and governance forums.
• Experience with tools such as Tableau, Power BI, Excel
• Excellent stakeholder management and communication skills- must be comfortable presenting risk findings and recommendations to executives, challenging gaps, and building consensus around remediation timelines

Nice to have:

• Knowledge of insider threat management, behavior-based monitoring, and detection technologies
• Industry-related certifications ( CISSP, CISA, CRISC)

What’s in it for you?

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable
• Leaders who support your development through coaching and managing opportunities
• Ability to make a difference and lasting impact
• Work in a dynamic, collaborative, progressive, and high-performing team
• A world-class training program in financial services
• Opportunities to do challenging work

Job Skills

Audits Compliance, Critical Thinking, Data Gathering Analysis, Decision Making, Financial Regulation, Industry Knowledge, Interpersonal Relationship Management, Product Services, Risk Management, Strategic Thinking

#TechPJ

Additional Job Details

Address: 16 YORK ST:TORONTO

City: Toronto

Country: Canada

Work hours/week: 37.5

Employment Type: Full time

Platform: TECHNOLOGY AND OPERATIONS

Job Type: Regular

Pay Type: Salaried

Posted Date: 2026-05-21

Application Deadline: 2026-08-17

Note: Applications will be accepted until 11:59 PM on the day prior to the application deadline date above.

Our Employment Opportunities

At RBC, we are guided by living shared values of Client First, Integrity, Collaboration, Respect and Excellence and winning together as One RBC. We believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.

#J-18808-Ljbffr