End User Services - Audit and Controls

Job Description

The Technology Infrastructure Risk Manager will play a critical role in driving risk governance, compliance, and controls integration for RBC Technology Infrastructure (TI). This role will form the Audit and Controls team within End User Services Technology Risk, responsible for ensuring technology risk compliance, audit readiness, and effective remediation across RBC and affiliate technology organizations.

• Collaborate with IT departments (cloud, mainframe, database, middleware, operations, DR), enterprise risk, security teams, and 2
  
  LOD to ensure RBC and CNB technology maintains compliance across technology‑related Risk, Audit, and Regulatory findings
• Monitor and manage Key Risk Indicators (KRIs): IAM, ITSM, Issue Management, Audit, Vulnerability and Patch Management, EOL, TSS, Openshare, NPID
• Ensure compliance with regulatory, internal risk, and audit expectations while fostering a culture of proactive risk management

• Design, document, and maintain control procedures and frameworks for technology infrastructure
• Develop comprehensive audit‑ready documentation including control matrices, risk registers, and audit closure packages
• Execute evidence collection for risk controls within End User Services
• Create clear, detailed remediation documentation and audit‑ready deliverables

• Partner with technology owners to document, manage, and drive remediation plans ensuring risk compliance and technology integration between CNB and RBC
• Manage multiple risk remediation projects simultaneously, prioritizing initiatives for timely completion
• Lead the Audit and Controls team in tracking and reporting remediation status to stakeholders

• Build and lead a high‑performing Audit and Controls team
• Mentor team members on audit methodologies, control frameworks, and technical documentation standards
• Oversee quality and consistency of audit deliverables and compliance documentation

• Minimum of 5 years in IT Risk Management or Internal Audit capacity, with strong focus on controls, remediation, and compliance
• Understanding of risk management frameworks and standards (regulatory compliance, enterprise risk, internal controls, SOX, ITGC)
• Expert technical writing ability for control procedures, audit documentation, and audit closure packages
• Exceptional relationship‑building and stakeholder management skills across diverse functions and organizational levels
• Proven ability to manage and prioritize multiple risk remediation projects simultaneously
• Industry framework knowledge: ITIL, NIST, COBIT, FedRAMP, FFIEC

• Expertise with UK and APAC regulators
• Industry certifications: CPA, CISA, CRISC, CISM, CISSP, CIA, PMI
• Project management experience
• ITSM/ITIL practitioner background

• Comprehensive Total Rewards Program including bonuses, flexible benefits, competitive compensation, and stock where applicable
• Leaders who support your development through coaching and mentoring
• Ability to make a meaningful difference and lasting impact on enterprise risk management
• Work in a dynamic, collaborative, progressive, and high‑performing team
• Opportunities to do challenging work as part of a global organization
• World‑class training programs in financial services