Senior Manager, IT Risk & Control , Wealth Management Europe

What is the opportunity?

The IT Risk & Control team, embedded in WII Business Technology T&O, serves as the 1st Line of Defense (1B) for WII IT risks, covering Investor Services and Wealth Management in Europe and Asia.

The IT Risk & Control team, embedded in WII Business Technology T&O, serves as the 1st Line of Defense (1B) for WII IT risks, covering Investor Services and Wealth Management in Europe and Asia.

This role supports the implementation of IT Risk Policies and Standards, processes IT Risk Issues in the Archer system, and assists with gap analysis and control design. It provides technical risk advice, ensures IT Risk processes are up-to-date, and partners with stakeholders like application custodians and T&O teams. Additionally, it offers ad-hoc support for Operational Risk Management programs and projects.

Should you be shortlisted, do please let us know if you have any specific requirements for the interview.

This is a permanent, full-time role and requires 4 days in the office at our 10 Fenchurch Avenue, London office.

• Work with IT teams to identify and document risk on the Enterprise Archer system (Risk register).
• Manage own findings portfolio as reviewer (initial review and approval, control over life cycle of risk remediation and risk acceptance, support to risk owners to mitigate slippages).
• Responsible for providing day-to-day support to the application towers with respect to IT risk advice and counsel.
• Continuously mature Issue Management processes and procedures to support the I&TS IT strategy.
• Support Director and SLT management on the appropriate treatment of technology risks.

• Lead and coordinate Internal and External audits for assigned LOBs as IT Risk Lead.
• Support Applications owners and custodians in understanding, executing, and maintaining the policies, standards, processes and tools to support requests from the broad T&O Operational risk community.
• Drive and support the technical environment in complying with key IT Risk policies, processes, and requirements both by engaging with internal teams and technology partners.
• Conduct and review gap analysis as directed.
• Lead the execution of Operational Risk initiatives as required.

• Conducts and/or supports Risk and Control Assessments, IT Risk. Assessments, and other Centre of Governance assessments according to the Enterprise Operational Risk Standard.
• Execute self-assessment and gaps identification against new regulations.

• Acting as 1st level of review for the assessment of risks stemming from new initiatives and projects.
• Review and approval of Integrated Risk Profile (IRP) & IT Risk Triage.

• Monitor on an ongoing basis various report and provide commentary on breaches.

• AI Tool Adoption for Risk:
  Deploy AI-driven solutions (e.g., anomaly detection, predictive risk analytics) to proactively identify and mitigate threats, ensuring quantifiable risk reduction and operational efficiency gains.
• AI
  
  Risk Management:
  
  Establish robust frameworks to address AI-specific risks, including model bias, data privacy, and algorithmic transparency, ensuring compliance with emerging regulatory standards.
• Business Partner Enablement:
  Collaborate with technology and business units to integrate AI risk tools into decision making processes, driving adoption, measuring value (e.g., reduced incident rates), and fostering a risk-aware culture.

• Represent 1st line Application risk in selected RBC risk forum.
• Creation of risk reporting material and presentation in internal Risk forums

• Extensive experience in the IT or financial services industry, demonstrating deep domain expertise.
• Relevant professional designation (e.g., CRISC, CISA/ISACA, PRMIA) to validate technical and risk management competencies.
• Strong understanding of the Application Lifecycle, including roles and responsibilities across the process.
• Proven ability to influence and collaborate with senior managers and operational risk groups across RBC.
• Exceptional communication skills (verbal and written), with a focus on relationship management and stakeholder engagement.
• Proficiency in PC and database tools, ensuring technical capability to support risk management activities.

• University degree and/or Information Security Certification (e.g., CISSP, CISM).
• Familiarity with Archer or similar risk management tools for efficient issue tracking and reporting.
• Strong facilitation skills to lead discussions and drive alignment across teams.
• In-depth knowledge of RBC's organisational structure, T&O processes, and compliance frameworks.
• Self-motivated with excellent time management and organisational skills to handle multiple priorities.
• Strong analytical and problem-solving skills, including qualitative and quantitative…