Director, Technology Risk Management - CNB

Job Summary

Job Description

The Director, Technology Risk Management, CNB (City National Bank) is responsible for identifying, assessing, and driving remediation of technology-related risk. This is a newly created role and requires a deep understanding of both IT environments and risk frameworks to effectively guide teams in remediation of control gaps, aligning with regulatory expectations, and enhancing the organization’s risk posture. The individual will partner with technology, compliance, audit, and business teams to ensure that risks are understood, tracked, and addressed in a timely, effective, and measurable way. This role is ideal for an outcome-focused risk technologist who can manage execution with strong delivery discipline.

CNB is an FDIC member bank and subsidiary of Royal Bank of Canada.

What will you do

• Risk Identification & Assessment
  - Analyze, interpret and challenge technology-related risks across infrastructure, applications, and third-party services.
  - Collaborate with control owners and technical teams to identify, document, and assess risks, vulnerabilities, and control gaps.

• Technology Landscape Understanding
  - Develop a deep understanding of the organization’s technology architecture, platforms, and operating model.
  - Stay current on emerging technologies and assess potential risk implications.

• Policy & Standards Governance
  - Interpret and understand enterprise policies, IT security standards, regulatory requirements, and industry frameworks
  - Act as the point person in the team for policy/standard understanding and a liaison between control owners and compliance/governance teams to ensure alignment and applicability of standards.

• Risk Remediation Delivery Management
  - Lead and manage the end-to-end lifecycle of risk remediation initiatives including scoping, planning, execution, tracking, and reporting.
  - Work cross-functionally with technology teams, vendors, and business stakeholders to drive timely and effective remediation of identified risks.
  - Maintain and update risk registers, issue trackers, and dashboards with clear ownership and status updates.

• Risk Communication & Reporting
  - Translate technical risk issues into business language for executive stakeholders.
  - Prepare clear, concise reporting on risk posture, remediation progress, and escalations as needed.

• Stakeholder Management
  - Build strong relationships with security, audit, compliance, enterprise risk, infrastructure, application teams, and senior leadership.
  - Facilitate risk and control workshops to promote awareness and accountability.

What you need to succeed

• Ability to identify, evaluate, and assess IT risks across applications, cloud, infrastructure and third-party services.

• Knowledge of control design and testing, including experience with internal audits and external regulatory reviews.

• Strong skills in leading remediation initiatives, managing milestones, resources, and cross-functional stakeholders.

• Experience with common project management methodologies (Agile, Waterfall, hybrid).

• Deep understanding of applicable regulations (e.g., SOX) and how they map to IT controls.

• Ability to interpret regulatory expectations and translate them into practical action plans.

• Capable of driving control remediation activities from issue identification through resolution and validation.

• Skilled in developing action plans, tracking progress, and escalating delays or obstacles.

• Excellent written and verbal communication skills with the ability to translate technical risk into business language.

• Experience preparing risk dashboards, executive summaries, and regulatory submissions.

• Ability to partner with business owners, control functions (compliance, audit), and technical teams to ensure coordinated and accountable risk management.

• Familiarity with Risk and Compliance tools (e.g., Archer, ServiceNow) and data visualization/reporting tools (e.g., Power BI, Tableau)

• Bachelor’s degree in CompSci, Finance or related degree

What’s in it for you?

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where app