Lead IT Risk- Control Testing

**Job Summary**

Manages the day-to-day operations and effectiveness of security-related programs and initiatives; assesses the costs associated with potential threats and solutions required to eliminate or minimize threats. Typically manages 2 or more specialized departments comprised of supervisors, managers, professionals, and/or large numbers of operational support employees.

**What is the opportunity?**

RBC Global IT Risk (GITR) team enables the protection of RBC's brand, systems, and operations by equipping business and technology partners with meaningful insights, advice, and information on RBC IT & cyber risks. The Senior Manager Cyber Security and IT Risk Management is a key strategic and integral role for the overall success of IT Control Management within IT Risk Management function. This dynamic position provides opportunities for working across the organization to deliver complex enterprise-wide initiatives as part of RBC’s ongoing plan to improve IT Risk Management and governance. In this role you will be responsible for strategically planning and managing successful implementation of the above-mentioned. The role will coordinate, develop, lead, communicate, and execute activities to ensure objectives are accomplished on time.

**What will you do ?**
- Leading teams to perform control testing that evaluate the design and operating effectiveness of IT key controls. This is a hands-on role where you are required to lead, guide, and coach your team on various aspects of control testing, IT risk management, and risk reporting.
- Take ownership and be accountable for your team’s deliverables to meet the milestones and timelines. Identify and escalate potential issues and risks as applicable. Plan and assign work to your team members. Prepare and present your team’s progress and status reports. Plan resource capacity and prepare work pipeline.
- Executing control testing to evaluate the design and operating effectiveness of IT controls. Documenting test work adhering to the quality standards, procedure, and industry best practices. Analyzing, aggregating, and articulating the results/issues/recommendations related to control testing activities.
- Participate in all phases of the internal control monitoring process including planning, testing, evaluating risk, identifying mitigating controls, developing conclusions, compiling reports, and maintaining work papers.
- Coordinate with stakeholders to log and manage control deficiencies. Assess whether remediation plans and corrective actions are reasonably designed to reduce risk. Verify that control deficiencies are remediated according to the remediation plans.
- Maintaining thorough understanding of organization's governing policies and standards, IT control testing methodologies, and related regulatory and compliance standards
- In this role, you will communicate and interact frequently with RBC partners and/or employees located across Canada and/or worldwide.

**What do you need to succeed?**

**Must have**:

- Bachelors' degree in computer science, engineering, or related field. Preferred Certifications: CRISC - Certified in Risk and Information Systems Control, CISA - Certified Information Security Auditor, CISSP - Certified Information Systems Security Professional.
- 7+ years' experience of testing IT controls, with at least two years in a team lead capacity preferably within financial services industry. Experience or understanding of IT risk management practices in financial services industry.
- Proficient at written and oral communication skills to effectively and timely communicate with stakeholders. Analytical and rationale thinking, supported by strong writing skills, are essential to document and communicate the test work. Ability to understand the stakeholders’ expectations for information and communication.
- A strong understanding of technology and/or financial services industry. Knowledge of FINRA, SEC, MSRB, FRBNY and OCC rules and regulations.
- Deadline-driven and results-oriented; able to meet consistently high-quality standards while handling a variety of tasks and deadlines simultaneously.

**Nice-to-have**:

- Risk and Control management knowledge and industry experience across Information Technology (IT) domains
- Working experience in cybersecurity and/or IT risk management spaces
- Big 4 IT risk consulting and/or audit experience

**What’s in it for you?**

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.
- A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable
- Leaders who support your development through coaching and managing opportunities
- Ability to make a difference and last