Senior Manager - IT Internal Audit

Job Description What is the opportunity?

The Senior Manager, IT Internal Audit is a self-directed, ambitious risk-management professional who approaches work with passion, curiosity, challenges the status quo, embraces change, has courage to innovate and thrives in a collaborative work environment. The ideal candidate will be part of a progressive, forward thinking, global Internal Audit team with the mandate to assess and challenge risk management practices, internal control and corporate governance processes across RBC’s Technology & Operations and Lines of Businesses.

From this unique position, you will gain exposure to RBC products, services, businesses, and platforms to become a subject matter expert, be challenged to implement creative audit techniques and expected to utilize data analytics to provide business insights.

This position supervises execution of internal audit plan by leading or conducting financial, compliance or operational audit projects including the examination and evaluation of the adequacy of internal controls. Applies extensive, in-depth knowledge, skills, and practices to perform complex assignments.

RBC Internal Audit leverages a unique perspective— with a coordinated view across the entire business—to deliver valuable advice that not only gives assurance, but that illuminates a bigger picture, connects dots, builds best practices and broadens possibilities. We connect intelligence to protect and enable RBC.

Please note that the location for this position is Toronto. This position requires a hybrid working arrangement of approx. 4 days/week in the office

• Lead and manage a team of professional audit staff assigned to the engagement; manage all key milestones including reporting to Internal Audit (IA) management and key stakeholders; review audit work for sufficient coverage and adherence to Internal audit standards; provide performance feedback to the assigned staff.

• Identify key IT risks; document the associated key control processes using Process Maps; and identify the key controls for review in the planning phase of an audit or assignment, including ongoing assessments of key technology risks and update relevant IA Technology related Audit Entities.

• Lead and manage the performance of the audit work; ensure appropriate working paper evidence is maintained; review working papers for appropriate evidence and support.

• Work collaboratively with other audit groups, the Technology & Operations groups (a) to review continuous control assurance processes and (b) to ensure that appropriate action plans are developed to address identified control deficiencies, corrective actions are implemented and audit issues are resolved on a timely basis as reflected under the issue tracking system.

• Lead the design, implementation, and execution of strategic initiatives; with a focus on enhancing continuous assurance and risk monitoring programs through the use of data-analytics and innovative automation of technology and cybersecurity control testing.

• Foster trusted relationships with clients and other internal audit partners to ensure requirements of multiple stakeholders are met; drive adoption of enhanced risk-based analytic capabilities, enable a culture of continuous improvement and ensure key stakeholders get maximum value from the audit engagement work.

• Provide consulting or advisory services, which are consistent with our role to evaluate and improve the effectiveness of risk management, control, and governance processes while maintaining objectivity and independence.

• 5-8 years of internal or external audit experience, including distributed technology experience in a large corporate organization, with a focus in big data analytics and audit management.

• Knowledge to identify and test IT general controls and IT automated controls/business process controls. (Absolutely KEY, and it should be a key word to scan in resumes)

• Experience with, or good knowledge of, technology governance and risk management concepts including third party and information management risks, enterprise architecture, data lakes, emerging technologies and next…