Sr. Operational IT Risk Manager - GFT

Are you a talented, creative and results-driven professional who thrives on delivering high-performing applications? Come join us!

Global Functions Technology (GFT) is part of RBC’s Technology and Operations division. GFT’s impact is far-reaching as we collaborate with partners from across the company to deliver innovative and transformative IT solutions. Our clients represent Risk, Finance, HR, CAO, Audit, Legal, Compliance, Financial Crime, Capital Markets, Personal and Commercial Banking and Wealth Management. We also lead the development of digital tools and platforms to enhance collaboration.

In this hands-on technical role, you will manage and provide subject matter expertise on technology risk control and advisory services to Finance IT and CFO Group management. Services include IT & operational risk analysis, risk & compliance reporting, risk awareness & advisory and audit liaison. You will assess and manage to ensure ongoing compliance with rapidly evolving technology management policies & standards.

You will be a member of the Finance IT Operational Risk Management team which is collectively responsible for provision of technical services, IT operations engineering, production support, quality engineering, Risk Management and business management across a portfolio of over 100 production applications. You will have ample opportunity to develop your professional skills and positively influence technology risk practices across RBC’s Global Functions Technology (GFT) group.

What will you do?

• Identify and assess IT & operational risks across a large & diverse portfolio of applications, 40% of which are subject to stringent SOX & SOC1 control standards.
• Test controls and document results/conclusions specific to MRA requests, Bank examinations, and/or any Regulatory requests.
• Monitor and report on risk exposures, including leading Archer approval Findings meetings that are hosted by the VP, Global Head of Finance IT.
• Support Finance IT Director and SMT management on the appropriate treatment of technology risks.
• Raise awareness of IT & operational risk, including design and roll-out of tailored IT risk education programs.
• Develop an understanding of best risk & control practices by maintaining a professional network across specialist teams such as Cyber Security, Group Risk Management and Internal Audit; act as Finance IT’s ‘point of contact’ for these teams.
• Manage Finance IT’s Enhanced Compliance Program (ECP), a major internal IT-driven initiative to drive compliance with current and emerging IT policy & standards.
• Contribute to the development of IT risk competencies, practices and outcomes across GFT.

What do you need to succeed?

Must-have

• Degree level education plus a relevant qualification in risk & information systems control (e.g. CRISC) or cybersecurity (e.g. CISSP) or (e.g. CISA).
• Internal or external IT audit qualification and experience; Operational Risk Management.
• Deep IT technical knowledge and experience covering: operating systems (e.g. Unix, Windows, zOS); database systems (e.g. Oracle, SQL Server, Sybase, DB2) and software security architectures; Knowledge of MS Suite of Apps.
• Passion for technology risk management and a desire to continually develop personal and team knowledge.
• Thorough understanding of IT service management frameworks such as ITIL or COBIT.
• Experience managing multiple projects or internal service delivery, including service level management, process design and skills development planning.

Nice-to-have

• Post graduate qualification in computing or cybersecurity or Information technology.
• Excellent written & verbal communication skills, with the ability to convey complex technical concepts to general IT and business managers.
• Familiarity with DevOps & Cloud concepts, processes and tooling, ORM Framework, Audit; Access and change management processes; SOX/SOC1.
• Preferred to have Finance industry experience.

RBC is committed to supporting flexible work arrangements when and where available. Details to be discussed with Hiring Manager.

What’s in it for you?

• Work in a dynamic, collaborative, progressive, and high-performing team.
• Ability to make a difference and lasting impact on operational risk management.
• Opportunities to do challenging work, engaging with a diverse set of established and emerging technologies.
• Build an extensive professional network and exert influence beyond a narrow role mandate.
• Support for professional development, including obtaining industry-standard qualifications.
• Leaders who support your development through coaching and managing opportunities.
• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation.

#LI-Hybrid
#LI-POST
#TECHPJ