Posted in

Sr. Manager – Controls Analysis

Sr. Manager – Controls Analysis

CompanyRoyal Bank of Canada
LocationToronto, ON, Canada
Salary$Not Provided – $Not Provided
TypeFull-Time
Degrees
Experience LevelSenior, Expert or higher

Requirements

  • Minimum of 7 years in risk management with a strong focus on mitigation and remediation.
  • Strong understanding of US & Canadian regulatory environment including reporting requirements.
  • Prior or current financial services experience required.
  • Strong ability to perform IT risk assessments following a defined Risk Management framework, standards, policies, and industry best practices.
  • Creative problem-solving and analytical skills with the proven ability to exercise flexibility and judgment while partnering with stakeholders at different levels of the organization.
  • Ability to challenge current IT control landscape, looking to increase efficiencies and drive changes on existing processes.
  • Experience working with regulators and internal/external auditors (Statutory Audit, SOX, SOC 1 and 2 engagements) effectively and helping stakeholders with remediation plans.
  • Excellent communication and organization skills.
  • Experience managing and prioritizing multiple risk remediation projects simultaneously.
  • Deep desire to support training and education of others and self.

Responsibilities

  • Implement control design and operational testing and assurance framework for IT risk domains, ensuring coverage of industry, regulatory (COBIT, NIST, FFIEC, CSA etc) and internal standards.
  • Advocate for a strong risk culture, increasing awareness on identifying potential control/operational gaps, process improvement opportunities, potential risks, and adequately managing them.
  • Ensure current TI controls provide complete coverage over all applicable technologies/assets, providing meaningful reporting to propagate the TI controls profile and state to IT leaders.
  • Assist the teams through Risk documentation for remediation and acceptance following Enterprise best practices while maintaining an overall compliance estate as per the defined guidelines.
  • Support the strategic direction to increase efficiency is assessing and reporting on risks with control testing/monitoring automation.
  • Help develop and build a centralized control assurance monitoring dashboard for all controls (i.e. KRI reporting).
  • Help develop the book of record for all control response packages to be leveraged for all audits, risk assessments and regulatory interactions.
  • Act as liaison between various stakeholders and Audit/Regulators to meet the requirements during different engagements.

Preferred Qualifications

  • CRISC, CISA, CISM, CAMS, CISSP, CPA, CA etc.