Senior Cyber Security and IT Risk Management Analyst

RBC; Toronto; On-site; CAD 100,000 - 125,000; Full time

Job summary

A major financial institution in Toronto seeks a Senior Cyber Security and IT Risk Management Analyst to support the identification and mitigation of operational and regulatory risks. The role involves planning and executing risk campaigns, managing regulatory initiatives, and maintaining strong business relationships. Candidates should have a bachelor's degree in Computer Science, over 4 years of relevant experience, and strong project management skills. Comprehensive benefits and professional development opportunities are offered.

Benefits

Comprehensive Total Rewards Program

Flexible benefits

World-class training program

Dynamic and collaborative work environment

Qualifications

• Minimum of 4 years’ experience in Information Security, IT Risk Management, or related fields.
• Strong organizational and deadline-driven capabilities.
• Experience with compliance and industry frameworks.

Responsibilities

• Plan and execute risk management campaigns.
• Manage audit and regulatory initiatives.
• Act as a trusted advisor for application teams.

Skills

Information/Cyber Security

IT Risk Management

Project Management

Communication Skills

Education

Bachelor’s degree in Computer Science or related field

Tools

ISO 27001

NIST 800-53

NIST CSF

COBIT

Job description

Job Description

The Senior Cyber Security and IT Risk Management Analyst role supports the identification and mitigation of operational, IT, and regulatory risks. The role contributes to the implementation of WMT initiatives that improve technology operations risk management practices.

Opportunity Overview

This advanced senior position offers the chance to work across the organization and make a significant impact.

Responsibilities

• Plan and execute risk campaigns end-to-end, develop and manage automation solutions to streamline evidence collection for WMT risk campaigns, and design high-quality GenAI prompts that automate evidence collection processes.
• Plan, implement, and manage initiatives to address control gaps in existing and new products and projects. Collaborate with cross‑functional teams to design robust processes that mitigate risks.
• Manage audit and regulatory initiatives. Ensure timely and effective responses to inquiries and resolution of audit/regulatory findings. Prepare high‑quality documentation and presentation materials.
• Establish and maintain strong working relationships across various business units. Act as a trusted advisor for application teams. Liaise with 2LOD and 3LOD (Internal Audit) when required.
• Serve as a trusted advisor, advising stakeholders on control documentation and testing, ensuring compliance with organizational policies, regulatory requirements, and industry standards.
• Maintain a thorough understanding of external technology and cybersecurity trends, emerging technologies, and internal technology and cyber risk management approaches.
• Maintain a thorough understanding of governing policies and standards, IT control testing methodologies, and regulatory and compliance standards.

Required Qualifications

• Bachelor’s degree in a relevant discipline such as Computer Science, Business, or a related field.
• 4+ years’ experience in Information/Cyber Security, IT Risk Management, IT Operations, or Technology, ideally within the financial services industry, a public accounting firm, or a financial institutions regulator.
• Proven experience with compliance and industry frameworks—such as ISO 27001, NIST 800‑53, NIST CSF, NIST 800‑171, or COBIT.
• Knowledge of OSFI, FINRA, SEC, MSRB, FRBNY, and OCC rules and regulations.
• Strong organizational, project management, and time management capabilities. Deadline‑driven and results‑oriented, able to manage multiple tasks and deadlines.
• Strong written and oral communication skills. Communicate effectively and timely with stakeholders, understand their needs, and present information clearly and persuasively.

Nice to Have

• Industry‑recognized certifications in Information Security or Risk Management (e.g., CISA, CRISC, CISSP).
• Experience crafting precise, context‑aware prompts to guide GenAI models for evidence extraction, categorization, and summarization.
• Prior experience in financial services, technology, or regulatory environments.

Benefits

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable.
• Leaders who support your development through coaching and managing opportunities.
• Ability to make a difference and lasting impact.
• Work in a dynamic, collaborative, progressive, and high‑performing team.
• A world‑class training program in financial services.
• Opportunities to do challenging work.

Additional Job Details

• Address: RBC CENTRE, 155 WELLINGTON ST W, Toronto
• City: Toronto
• Country: Canada
• Work hours per week: 37.5
• Employment Type: Full time
• Job Type: Regular
• Pay Type: Salaried
• Posted Date: 2025‑12‑22
• Application Deadline: 2026‑01‑05
• Platform: TECHNOLOGY AND OPERATIONS

Equal Opportunity Employment

At RBC, we believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.

Join our Talent Community: Sign up and get customized information on our latest jobs, career tips, and recruitment events that matter to you. Expand your limits and create a new future together at RBC. Find out how we use our passion and drive to enhance the well‑being of our clients and communities at https://jobs.rbc.com.

RBC is presently inviting candidates to apply for this existing vacancy. Applying to this posting allows you to express your interest in this current career opportunity at RBC. Qualified applicants may be contacted to review their resume in more detail.