Senior IT Risk Analyst

Join to apply for the Senior IT Risk Analyst (Global Security) role at RBC. The RBC Global IT Risk (GITR) team protects RBC’s brand, systems, and operations by equipping business and technology partners with insights, advice, and information on IT and cyber risks. The Senior Cyber Security and IT Risk Management Analyst performs risk‑based testing of IT controls, evaluates their design and effectiveness, and supports the identification, mitigation, and monitoring of IT and regulatory risks. This senior professional is an expert in their discipline and collaborates across the organization. What Will You Do? Executing control testing to evaluate the design and operating effectiveness of IT controls. Documenting test work adhering to quality standards, procedures, and industry best practices. Analyzing, aggregating, and articulating the results, issues, and recommendations related to control testing activities. Participate in all phases of the internal control monitoring process including planning, testing, evaluating risk, identifying mitigating controls, developing conclusions, writing reports, and maintaining work papers. Coordinate with stakeholders to log and manage control deficiencies. Assess remediation plans and corrective actions to reduce risk. Verify remediation is performed according to the plans. Establish strong working relationships with stakeholders across business units and teams to build trust and act as trusted advisor. Perform as a subject matter expert to advise stakeholders on control documentation and testing in compliance with policies and standards. Maintain thorough understanding of organization’s governing policies and standards, IT control testing methodologies, and related regulatory and compliance standards. Keep abreast of external cyber security trends, technologies, and cyber risk management approaches, control hygiene of the environment, and often collaborate with other teams on IT risk‑related initiatives to provide subject‑matter recommendations and guidance to achieve a risk posture within the organization’s overall risk appetite. What Do You Need To Succeed? Bachelor’s degree in computer science, engineering, or related field. Preferred certifications: CRISC, CISA, CISSP. Over five years’ experience testing IT controls, preferably within financial services. Experience or understanding of IT risk management practices in financial services. Proficient written and oral communication skills to effectively and timely communicate with stakeholders. Analytical and rational thinking supported by strong writing skills are essential to document and communicate test work. Ability to understand stakeholders’ expectations for information and communication. A strong understanding of technology and/or the financial services industry. Knowledge of FINRA, SEC, MSRB, FRBNY, and OCC rules and regulations. Deadline‑driven and results‑oriented; able to meet consistently high‑quality standards while handling a variety of tasks and deadlines simultaneously. Nice‑to‑have Risk and control management knowledge and industry experience across IT domains. Working experience in cybersecurity and/or IT risk management space. Big‑4 IT risk consulting and/or audit experience. What’s in it for you? A comprehensive total rewards program including bonuses, flexible benefits, competitive compensation, commissions, and stock where applicable. Leaders who support your development through coaching and management opportunities. Ability to make a difference and lasting impact. Work in a dynamic, collaborative, progressive, and high‑performing team. A world‑class training program in financial services. Opportunities to do challenging work. Location: Calgary, Alberta, Canada. Work hours: 37.5 per week. Employment type: Full time. Application deadline: 2025‑11‑24. #J-18808-Ljbffr