Operational Risk Manager - Finance IT, GFT

Job Description

What is the Opportunity
In this hands-on technical role, you will support and provide technology risk control and advisory services to Finance & Audit Technology and CFO Group management. Services include IT & operational risk analysis, risk & compliance reporting, risk awareness & advisory and audit liaison. You will assess and manage to ensure on-going compliance with rapidly evolving technology management policies & standards. Including automation, data analysis, and reporting.

You will be a member of the Finance IT Operational Risk Management team which is collectively responsible for provision of technical services, IT operations engineering, production support, quality engineering, Risk Management and business management across a portfolio of over 100 production applications. You will have ample opportunity to develop your professional skills and positively influence technology risk practices across RBC’s Global Functions Technology (GFT) group.
What will you do?

Identify and assess IT & operational risks across a large & diverse portfolio of applications, 40% of which are subject to stringent SOX & SOC1 control standards

Test Controls and document results/conclusions specific to MRA requests, Bank examinations, and/or any Regulatory requests

Monitor and report on risk exposures, including leading Archer approval Findings meetings that are hosted by the VP, Global Head of Finance IT

Support Finance IT Director and SMT management on the appropriate treatment of technology risks

Raise awareness of IT & operational risk, including design and roll-out of tailored IT risk education programs

Develop an understanding of best risk & control practices by maintaining a professional network across specialist teams such as Cyber Security, Group Risk Management and Internal Audit; act as Finance IT’s ‘point of contact’ for these teams

Manage Finance IT’s Enhanced Compliance Program (ECP), a major internal IT-driven initiative to drive compliance with current and emerging IT policy & standards.

Contribute to the development of IT risk competencies, practices and outcomes across GFT

What do you need to succeed?
Must-have:

Degree level education plus a relevant qualification in risk & information systems control (e.g. CRISC) or cybersecurity (e.g. CISSP) or (e.g. CISA)

Deep IT technical knowledge and experience covering: operating systems (e.g. Unix, Windows, zOS); database systems (e.g. Oracle, SQL Server, Sybase, DB2) and software security architectures;
Knowledge of MS Suite of Apps

Passion for technology risk management and a desire to continually develop personal and team knowledge

Thorough understanding of IT service management frameworks such as ITIL or COBIT

Experience managing multiple projects or internal service delivery, including service level management, process design and skills development planning

Excellent written & verbal communication skills, with the ability to convey complex technical concepts to general IT and business managers

Nice-to-have:

Post graduate qualification in computing or cybersecurity or Information technology

Internal or external IT audit qualification and experience;
Operational Risk Management

Familiarity with Dev Ops & Cloud concepts, processes and tooling, ORM Framework, Audit;
Access and change management processes; SOX/SOC1

What’s in it for you?We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

Work in a dynamic, collaborative, progressive, and high-performing team

Ability to make a difference and lasting impact on operational risk management

Opportunities to do challenging work, engaging with a diverse set of established and emerging technologies

Build an extensive professional network and exert influence beyond a narrow role mandate

Support for professional development, including obtaining industry-standard qualifications

Leaders who support your development through coaching and managing opportunities

A comprehensive…