Senior Manager, IT Risk and Controls

RBC; Toronto; Presencial; CAD 100.000 - 140.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Bonuses and flexible benefits

World-class training program

Diversity and inclusion

Descripción de la vacante

RBC in Toronto, Canada is seeking a Senior Security Risk professional to manage security-related programs, assess threats, and ensure regulatory risk reporting. You will lead risk standards, monitor IT risks, develop training, and act as a trusted advisor across 1LOD/2LOD/3LOD within Investor Services Tech.

You will collaborate with audits and suppliers, drive project risk assessments, and support transformation programs with strong communication and stakeholder negotiation skills.

Formación

• Excellent written & verbal communication skills.
• Degree level education plus a relevant risk & information systems control or cybersecurity qualification.
• Experience managing multiple projects or internal service delivery.
• Internal or external IT audit qualification and experience; Operational Risk Management.

Responsabilidades

• Lead security risk assessment standards, policies and procedures.
• Assess business needs against security concerns and recommend changes.
• Ensure IT risks are controlled and compliant with security policies.
• Develop training on information security risk metrics and controls; coordinate audits and suppliers.
• Build strong relationships across units; act as trusted risk advisor to 1LOD/2LOD/3LOD.
• Deliver risk advisory within Investor Services Business Technology, AI and Automation programs.
• Communicate effectively with stakeholders to align expectations and outcomes.
• Influence stakeholders to deliver superior risk solutions.

Conocimientos

Communication skills

Risk management

IT audit experience

Project management

Security & compliance

Educación

Degree in IT or related field

CRISC/CISSP/CISA certification

Descripción del empleo

Job Description

WHAT IS THE OPPORTUNITY?

In this role you will manage the day-to-day operations and effectiveness of security-related programs and initiatives; assessing the costs associated with potential threats and solutions required to eliminate or minimize threats. You will apply extensive, in-depth knowledge, skills, and practices to perform complex assignments. This will require reviewing of risk-related standards, policies and regulations both internally and regional. You will also be responsible for the completion of regulatory risk reporting.

WHAT WILL YOU DO?

• Leading in the development, implementation and enforcement of organization-wide security risk assessment and control standards, policies and procedures.
• Monitoring and assessing business needs against security concerns and recommending necessary changes to enhance information systems security.
• Managing activities for IT risks control in business operations; ensuring that the server, network operations and applications are compliant with security procedures, systems, and policies.
• Developing training on information security risk metrics, polices, risk migration and elimination procedures for staff, coordinating with audits and suppliers on information security improvement.
• Establish and maintain strong working relationships across business units and segments. Collaborate with various groups to define and achieve deliverables, acting as a trusted advisor on risk and controls by liaising with 1 LoD, 2LOD, and 3LOD.
• Deliver risk advisory and consulting, within Investor Services Business Technology, AI and Automation programs. Support our transformation programs and businesses on Project Risk Assessment (iITRA), Findings, Audits, KRI Compliance Monitoring, Reporting and Governance, and control activities.
• Strong analytical and critical thinking, supported by solid writing skills are essential for documenting and communicating work effectively. You should be able to grasp stakeholder expectations and align your communication accordingly.
• Ability to impact, influence and negotiate with key stakeholders in building a superior solution, and ultimately a strong stakeholder experience

WHAT DO YOU NEED TO SUCCEED?

Must have:

• Excellent written & verbal communication skills, with the ability to convey complex technical concepts to general IT and business managers
• Degree level education plus a relevant qualification in risk & information systems control (e.g. CRISC) or cybersecurity (e.g. CISSP) or (e.g. CISA), Deep IT technical knowledge and experience covering: operating systems (e.g. Unix, Windows, zOS); database systems (e.g. Oracle, SQL Server, Sybase, DB2) and software security architectures; Knowledge of MS Suite of Apps
• Passion for technology risk management and a desire to continually develop personal and team knowledge
• Experience managing multiple projects or internal service delivery, including service level management, process design and skills development planning
• Internal or external IT audit qualification and experience; Operational Risk Management

Nice-to-have

• Post graduate qualification in computing or cybersecurity or Information technology
• Familiarity with DevOps & Cloud concepts, processes and tooling, ORM Framework, Audit; Access and change management processes; SOX/SOC1

WHAT’S IN IT FOR YOU?

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable
• Leaders who support your development through coaching and managing opportunities
• Ability to make a difference and lasting impact
• Work in a dynamic, collaborative, progressive, and high-performing team
• A world-class training program in financial services
• Opportunity to join a diverse and inclusive team to increase the awareness of risk initiatives within RBC
• Opportunity to expand your limits and create a new future together at RBC

Job Skills

Business Continuity and Disaster Recovery (BCDR), Business Technology, Communication, Cyber Security Management, Firewall Management, Information Security, Information Security Auditing, Information Security Operation Center (ISOC), Information Security Risk, Information System Security, IT Network Security, Operational Delivery, Problem Management, Process Management, Project Risk Assessments, Risk Assessments, Security Risk, Security Risk Assessment, Threat Management

Additional Job Details

Address:

RBC CENTRE, 155 WELLINGTON ST W:TORONTO

City:

Toronto

Country:

Canada

Work hours/week:

37.5

Employment Type:

Full time

Platform:

TECHNOLOGY AND OPERATIONS

Job Type:

Regular

Pay Type:

Salaried

Posted Date:

2026-07-15

Application Deadline:

2026-10-26

Note** : **Applications will be accepted until 11:59 PM on the day prior to the application deadline date above

Our Employment Opportunities

At RBC, we are guided by living shared values of Client First, Integrity, Collaboration, Respect and Excellence and winning together as One RBC. We believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.