Associate Director, Cyber and Technology Risk Management Compliance and Operations

What is the opportunity?

The Associate Director, Cyber and Technology Risk Management Compliance and Operations plays a key role in ensuring Cyber and Technology Risk support services are proactively developed, operated and evolved to help risk manage this Top Risk risk domain. The position provides broad exposure to operational risk programs, cyber and technology controls and related risk management while working within a strong global team. As the Technology Risk team is part of Enterprise Resilience Risk (ERR), you will get exposure to four other risk domains: Third Party, Business Continuity, Fraud and Physical Risk.

You will support Cyber and Technology Risk Management leadership within Group Risk Management in facilitating the delivery of various oversight and challenge processes including: tracking and reporting on status and quality of key Operational Risk programs; identifying issues with policy/standards compliance through analysis and testing of controls; monitoring cyber and technology incidents; and continually working with the first line and regulators to ensure reporting of incidents is timely, seamless and accurate.

What will you do?

• Ensure that the process to monitor Cyber and Technology incidents and report to regulators is documented and reporting is timely, accurate and complete.
• Develop and execute a program, including analytics and reporting, that provides an informed ongoing opinion on the compliance of Technology and Operations controls with Cyber and IT Policies and Standards.
• Maintain the Global Cyber and Technology Risk and Roadmap and ensure key deliverables are executed in a timely manner.
• Understand (Provide support on) RBC's IT Risk framework, policies, standards, and guidelines and contribute to their development and ensure alignment with regulatory and industry practices to support effective assessment of compliance.
• Develop, operate and oversee end to end oversight analytics reporting and processes for key IT risk practices such as IT Risk Findings, Control Assurance conducted across Cyber and Technology Risk.
• Track and report on remediation of Cyber and Technology owned Regulatory, Audit and Self-Declared issues.
• Provide support for responses to external exams (Regulatory/Client/Rating Agency etc.).
• Develop and maintain key internal and external relationships to provide advice and oversight on standard compliance, support operational risk program adherence and effective incident reporting.

What do you need to succeed?

Must-have:

• University degree, or equivalent
• 7 years in the financial services or other regulated industries
• 5 years' experience in development of Risk Frameworks
• 5 years' experience in in risk identification, aggregation, analysis, and ranking
• 5 years in a delivery organization
• Strong metrics and performance management background including data management and analysis
• 3-5 years managing employees, either directly or indirectly through risk management engagements

Nice-to-have:

• Experience in working within a large financial services company
• Knowledge of Project Management (PMF) process/disciplines
• CRISC or other Information Security Certification

What's in it for you?

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation
• Leaders who support your development through coaching and managing opportunities
• Work in a dynamic, collaborative, progressive, and high-performing team
• Opportunities to do challenging work
• Flexible work/life balance options

Job Skills

Additional Job Details

Note: Applications will be accepted until 11:59 PM on the day prior to the application deadline date above