Risk Analyst, Third Party Disaster Readiness

Royal Bank of Canada; Toronto; On-site; CAD 90,000 - 130,000; Full time

Benefits offered by this job

Total Rewards Program

Coaching and development

Dynamic team

Job summary

Royal Bank of Canada in Toronto is seeking a risk specialist to support the T&O Business Continuity & Third-Party Disaster Readiness Centre of Excellence. You will help assess, monitor, and validate suppliers' disaster recovery capabilities, aligning with regulatory and internal standards to strengthen resilience.

You will partner with Line of Business, IT Risk, BCM, and Supplier Management to drive risk assessments, due diligence, and remediation.

Qualifications

• Experience assessing and reporting on third-party disaster recovery risks.
• Familiarity with regulatory expectations for vendor resilience and risk management.
• Ability to work independently and in cross-functional teams.

Responsibilities

• Support end-to-end risk assessments of suppliers' DR capabilities.
• Ensure alignment with resilience standards and internal risk frameworks.
• Provide oversight for identification and mitigation of third-party DR risks.
• Conduct due diligence and ongoing risk assessments for contracts.
• Escalate material risks to senior leadership for action.

Skills

BCDR

Cost-Benefit Analysis

Cyber Security Management

Firewall Management

Information Security Management

IT Network Security

Operational Delivery

Problem Management

Process Management

Threat Management

Education

University/ College Degree in a relevant or applicable field

Job description

Job Description

What is the Opportunity?

This role is critical to the success of the T&O Business Continuity & Third-Party Disaster Readiness team's ability to build and maintain a successful Centre of Excellence via clearly documented risk assessment processes, insightful reporting, and alignment to industry and internal standards, and to regulatory/legislative requirements.

What will you do?

• Support the end-to-end process for assessing, monitoring, and validating suppliers' disaster recovery (DR) capabilities.


• Ensure alignment with corporate resilience standards, internal risk frameworks, and applicable regulatory expectations.


• Provide oversight and support to business units for the identification, mitigation, and remediation of third-party disaster recovery risks.


• Conduct third-party disaster readiness due diligence and ongoing risk assessments for new, existing, and renewed contracts.


• Identify and escalate material risks, unresponsiveness, delayed service level agreements (SLAs), and critical deficiencies to senior leadership for timely action.


• Support the evaluation of concentrated supplier risks and recommend strategies to mitigate single points of failure.


• Documents end-to-end requirements for meeting new obligations in Third Party Disaster Recovery risk assessment, monitoring, and reporting.


• Looks for opportunities to automate processes, communication and/or reporting.


• Partner with Line of Business teams, IT Risk, BCM, Supplier Management Office, and SaaS Architecture to ensure comprehensive and accurate DR assessments.


• Act as a subject matter expert to support supplier engagements, contract negotiations and renewal discussions related to resilience and disaster recovery provisions.


• Leverages the existing supplier management process to determine risk assessment needs and priorities, makes assessments, and reports results.


• Identify any issues or risk gaps and track issues through to completion.


• Documents opportunities for improvement uncovered through reviews or researching as required, to increase efficiency and better meet the goals of the business.


• Assists in implementing KRIs/ KPIs/ EXI metrics for our overall compliance reporting obligations.


• Assists in understanding how new regulations, policies or standards impact the disaster readiness process and reporting in order to make meaningful recommendations on suggested changes.


• Develop or improve tools and mechanisms for building reporting processes for the team and the business.

What do you need to succeed?

Must have:

• University/ College Degree in a relevant or applicable field.


• 2- 4 years experience in performing risk assessment and related reporting and tracking.


• Experience with Disaster Recovery and Business Continuity Management.


• Basic understanding of IT infrastructure and Third-Party Supplier Lifecyle.


• Ability to understand policies, standards and related regulatory requirements, particularly with respect to third-party relationships.


• Ability to work independently or within team structures.


• Ability to learn quickly in order to understand stakeholder positions throughout the enterprise.

Nice to have:

• Working with financial institutions or a similar large organization.


• Software/ system implementation experience for SaaS/cloud solutions.


• Some knowledge or experience with MSA/ contractual agreements.

What's in it for you?

• We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.


• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable.


• Leaders who support your development through coaching and managing opportunities.


• Ability to make a difference and lasting impact.


• Work in a dynamic, collaborative, progressive, and high-performing team.


• Opportunities to do challenging work.


• Opportunities to take on progressively greater accountabilities.

Job Skills

• Business Continuity and Disaster Recovery (BCDR), Cost-Benefit Analysis (CBA), Cyber Security Management, Firewall Management, Information Security Management, IT Network Security, Operational Delivery, Problem Management, Process Management, Threat Management

Additional Job Details

• Address: RBC CENTRE, 155 WELLINGTON ST W:TORONTO


• City: Toronto


• Country: Canada


• Work hours/week: 37.5


• Employment Type: Full time


• Platform: TECHNOLOGY AND OPERATIONS


• Job Type: Regular


• Pay Type: Salaried


• Posted Date: 2026-11-05


• Application Deadline: 2026-11-23

At RBC, we are guided by living shared values of Client First, Integrity, Collaboration, Respect and Excellence and winning together as One RBC. We believe an inclusiv