Associate Director - Cyber and Technology Risk Management

What is the Opportunity?

As part of the Group Risk Management (GRM), Enterprise Resiliency Risk, U.S. Cyber and Technology Risk Management team, the Associate Director, Cyber and Technology Risk will be responsible for overseeing compliance with IT risk management frameworks and enhancing IT risk management capabilities. This role will also be responsible for oversight and challenge of the RBC Bank ("RBCB") business platform, assisting in aligning policy, frameworks, and processes with the RBC IT Risk Management framework, providing IT Risk performance management and reporting governance, and continuously developing a risk aware culture within the supported business platforms.

What will you do?

• Provides technical and best practice guidance on Cyber & IT Risk considering specific business platform, regional complexities, and issues.

• In collaboration with other groups, perform thematic reviews, IT RCSA review and challenge, scenario analysis and new product or change initiative assessments.

• Provides expert advisory on RBC's IT Risk framework, policies, standards, and guidelines to align with regional regulatory requirements.

• Contribute to monthly and quarterly reports on the supported business platform's IT Risk profile.

• Engage with domain leads for Cyber, Disaster Recovery, Infrastructure, IT Operations Change Management & IAM Practices to obtain technical domain advice as appropriate.

• Engage with RBCB business aligned risk leads and the Enterprise IT and cybersecurity risk management team to create and maintain the Technology and Cyber Risk Profile for the RBCB portfolio, review and challenge the 1LoD IT Risk profiles, ensuring they reflect accurate and complete IT and Cyber risk posture and compliance status, and that there are appropriate actions are documented and in place, where needed.

• Review Information Security & IT governance frameworks, leveraging existing frameworks and approaches from the IT Risk Centers of Governance (CoGs).

• Review and challenge the 1LOD Cyber & IT Issue Management process and output.

• Collaborate with management, IT and cross-functional teams to identify and communicate emerging risks and facilitate risk remediation efforts.

• Develop and maintain trusted internal and external relationships to provide advice and oversight on Cyber and IT risk management.

• Proactively manage complex and sometimes competing relationships with key local, regional and global stakeholders on a regular basis.

What do you need to succeed?

• Bachelor's degree in Information Technology, Risk Management, Information Security, or a related field.

• 7+ years of experience in financial services or other regulated industries

• Demonstrated ability to identify and analyze information technology and cyber security risks, control gaps, and other Cyber & IT risk management practices.

• Detail-oriented and action-oriented individual who continually strives for improvement.

• Strong understanding of regulatory frameworks (e.g., NIST, FFIEC) and IT and Cyber Security risk, Regulatory Requirements (GLBA; NYDFS; Federal Banking Regulatory Requirements), Information Security and IT Risk domain principles.

• Ability to work collaboratively with diverse groups and cross-functional teams to address emerging risks and facilitate ongoing risk remediation.

• Certifications in IT or Cyber Security risk management (e.g., CRISC, CISM, CISSP, or similar) preferred

What's in it for you?

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable

• Leaders who support your development through coaching and managing opportunities

• Ability to make a difference and lasting impact

• Work in a dynamic, collaborative, progressive, and high-performing team

• Opportunities to do challenging work

• Opportunities to build close relationships with clients

The good-faith expected salary range for the above position is $110,000 - $190,000 (New Jersey), $85,000 - $$150,000 (Minnesota) depending on factors including but not limited to the candidate's experience, skills, registration status; market conditions; and business needs.This salary range does not include other elements of total compensation, including a discretionary bonus and benefits such as a 401(k) program with company-matching contributions; health, dental, vision, life and disability insurance; and paid time-off plan. RBC's compensation philosophy and principles recognize the importance of a highly qualified global workforce and plays a critical role in attracting, engaging and retaining talent that:

• Drives RBC's high performance culture

• Enables collective achievement of our strategic goals

• Generates sustainable shareholder returns and above market shareholder value

#LI - Hybrid

#LI - POST

Job Skills

Additional Job Details

Note: Applications will be accepted until 11:59 PM on the day prior to the application deadline date above