Job Description
What is the Opportunity?The Sr. Manager, Infrastructure & Risk Center of Excellence (COE) will play a critical role in supporting a newly formed technology risk management (1A) team within the Bank’s Technology Infrastructure (TI) organization. This role will collaborate with IT departments (e.g. cloud, mainframe, database, middleware, operations, DR), enterprise risk and security teams and 2LOD to transform the existing 1st line risk practices and bring forward the TI organization’s risk profile. The position ensures compliance with regulatory, internal risk, and audit expectations while fostering a culture of proactive risk management across the IT organization and supporting the achievement of TI’s strategy.
What will you do?
Develop and oversee the enhancement of the current IT risk assessment processes managed by the group, ensuring appropriate coverage of IT Risk Management framework and US and CAD regulatory requirements.
Monitor emerging threats and trends within the technology landscape, including but not limited to, cyber, operational and third-party risks.
Provide ongoing assessment of IT risk strategies, frameworks and processes to ensure continued alignment with emerging trends and regulatory expectations.
Define, implement and monitor risk assessment methodologies and monitoring tools to identify technology related risks.
Conduct regular risk assessments and gap analysis to identify potential weaknesses in IT controls and recommend appropriate remediation strategies.
Collaborate with Controls Analysis & TI Risk COEs to ensure assessment processes are efficient while supporting the advancement of TI by driving smart, risk-based decisions by IT partners.
Establish key metrics and reporting capabilities to effectively evaluate IT-related risks dependent on RBCs overall environment.
Partner and build strong relationships with IT business partners to assist, educate and proactively identify risks associated with IT activities.
Must have:
Minimum of 7 years in an IT Risk Management capacity, across any of the 3 lines of defense, with a strong focus on mitigation and remediation.
Strong understanding of risk management frameworks and standards across the US or Canada (e.g., regulatory compliance, enterprise risk, internal controls, SOX, ITGC); expertise with UK and APAC regulators, considered beneficial.
Understanding of various infrastructure and middleware platforms such as cloud, mainframe, middleware, database, operations.
Demonstrated ability to design and implement processes to manage risk management and risk remediation work with delivery of actionable risk reporting.
Exceptional relationship-building skills, with the ability to collaborate across diverse functions and levels of the organization.
Strong analytical and problem-solving skills, with the ability to create scalable, repeatable processes that simplify risk management in IT operations.
Passionate about improving the risk management experience while delivering on commitments and expectations from risk stakeholders.
Experience managing and prioritizing multiple risk remediation projects simultaneously.
Deep desire to support training and education of others and self.
Industry framework knowledge, i.e., NIST, COBIT, FedRAMP, FFIEC.
Industry related certifications, i.e., CISA, CPA, CA, CRISC, CISM, CISSP etc.
A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable.
Leaders who support your development through coaching and managing opportunities.
Ability to make a difference and lasting impact.
Work in a dynamic, collaborative, progressive, and high-performing team.
A world-class training program in financial services.
Job Skills
Business Continuity and Disaster Recovery…
To Search, View & Apply for jobs on this site that accept applications from your location or country, tap here to make a Search: