Director, Control Testing and Assurance (Global Security)

RBC; Calgary; On-site; CAD 90,000 - 150,000; Full time

Job summary

An established industry player is seeking a dynamic Director of Control Testing and Assurance to lead risk-based control testing activities. This pivotal role involves independently evaluating the effectiveness of controls within the first line of defense, driving improvements in IT and Cyber risk management. The ideal candidate will leverage their extensive experience to present insights to senior leadership and foster strong relationships across business units. Join a collaborative team dedicated to innovation and excellence, and make a lasting impact in a supportive environment that values employee growth.

Benefits

Comprehensive Total Rewards Program

Flexible Benefits

Competitive Compensation

Stock Options

Supportive Leadership

Flexible Work/Life Balance

Qualifications

• 7-10 years of experience in Risk, Controls, and related topics.
• Strong stakeholder and relationship management skills.

Responsibilities

• Lead and execute RBC’s IT Key Controls testing and assurance program.
• Provide oversight for internal control testing function.

Skills

Risk Management

Controls Testing

Stakeholder Management

Analytical Thinking

Communication Skills

Education

University Degree

Tools

ISO27001

NIST 800-53

COBIT

Job description

Director, Control Testing and Assurance (Global Security)

Join to apply for the Director, Control Testing and Assurance (Global Security) role at RBC.

What is the opportunity?

Global IT Risk (GITR) is part of RBC’s Technology and Operations division. It enables the protection of RBC's brand, systems, and operations by equipping technology partners with meaningful actions, insights, actionable advice, and information on RBC IT & Cyber risks. Join our dynamic team as a “Director, Control Testing and Assurance”, where you will play a pivotal role in advancing our organization's technology, risk, security, and operations landscape.

Job Summary

You will lead and execute risk-based control testing activities, independently evaluating the design, implementation, and operating effectiveness of these controls within the first line of defense (1LOD). Your expertise will be critical in driving change and overall improvement across the organization’s approach to IT and Cyber risk. This is an advanced senior position, offering opportunities to work across the organization, functions, and make a significant impact.

What will you do?

• Lead, set direction, and execute RBC’s IT Key Controls testing and assurance program.
• Identify new opportunities for uplift and/or to better promote our current initiatives.
• Develop roadmaps and challenge the status quo.
• Provide oversight for internal control testing function and related activities.
• Present roadmaps and reports to senior leadership and external stakeholders as required.
• Establish and maintain strong working relationships across all business units, and 3 lines of defense.
• Serve as a trusted advisor, advising stakeholders on risk, control testing, compliance with organizational policies, regulatory requirements, and industry standards.
• Maintain a thorough understanding of external technology and cybersecurity trends, emerging technologies, and internal technology and cyber risk management practices.

What You Need to Succeed?

Must have:

• Experience: 7-10 years’ experience in Risk, Controls, and related topics.
• Experience in IT Risk Management, Technology, with focus on risk and controls testing.
• University graduate or equivalent experience.
• Strong stakeholder and relationship management.
• Strong communication (verbal and written) skills.
• Ability to think analytically, navigate ambiguity, and recommend solid solutions.
• Ability to multi-task and adapt to changing priorities.
• Advanced presentation skills.

Nice-to-have:

• Understanding of financial services industry and experience with Compliance and Industry frameworks such as ISO27001, NIST 800-53, NIST CSF, NIST 800-171, COBIT.
• Knowledge of regulatory bodies and frameworks such as OSFI, FINRA, SEC, MSRB, FRBNY, OCC.
• Strong knowledge of rules, regulations, and compliance requirements for the financial services industry concerning hybrid cloud and multiple technology domains.
• Experience in cybersecurity and/or IT risk management spaces.

What's in it for you?

We thrive on challenges, progressive thinking, and working together to deliver trusted advice. We care about our employees' growth, making a difference, and mutual success. Benefits include:

• A comprehensive Total Rewards Program, including bonuses, flexible benefits, competitive compensation, commissions, and stock options where applicable.
• Supportive leadership for your development.
• Opportunity to make a lasting impact.
• Work in a dynamic, collaborative, high-performing team.
• World-class training in financial services.
• Flexible work/life balance options.