Senior Director, Head of US IT Risk Governance (Global Security)

Job Description

What is the opportunity?

The Head of IT Risk Governance at RBC US is a is a First Line of Defense leadership role accountable for establishing, maintaining, and overseeing the US IT Risk framework. This role will report to the Head of IT Risk at RBC US.
This leadership role will establish and manage the US IT risk governance, measure and report the IT Risk indicators of RBC US, monitor compliance with IT Risk internal policies and regulation, provide advisory support for risk management practices, and promote an IT Risk culture across the IT organization.

What will you do?

Build and manage a team of IT Risk professionals responsible for delivering the IT risk framework for RBC US and its Legal Entities in close partnership with Enterprise IT Risk and US Legal Entities IT Risk teams.

Key areas of focus will include:

• US IT Risk Governance

  • Develop, manage and communicate CUSO specific IT Risk procedures.

  • Manage the CUSO IT Risk Committee.

  • Oversee US legal Entity IT Risk practices in alignment with the CUSO framework.

  • Measure the performance of the US IT Risk framework.

• US IT Risk Monitoring and Reporting

  • Manage CUSO KRI lifecycle inclusive of KRI reviews and reperformance.

  • Develop comprehensive risk reports towards senior audience.

• US IT Risk Compliance

  • Monitor and communicate changes to internal policies and industry standards for key IT Stakeholders to pro-actively address any impact.

  • Monitor and communicate changes to regulatory framework for key IT stakeholders to pro-actively address any impact.

• US IT Risk Framework & Advisory

  • Define and ensure US requirements are included into the Enterprise IT Risk Framework.

  • Provide advisory support to IT stakeholders for risk assessment and control design.

• US IT Risk Culture

  • Provide guidance and training to employees on IT risk management best practices.

  • Increase IT Risk awareness through regular communication to IT stakeholders.

What do you need to succeed?

Must have:

• Minimum 10-15 years of experience in IT Risk, preferably in large financial services firms.

• Strong leadership skills.

• Proven track record at analyzing large datasets and extracting added value.

• Excellent written reporting skills towards senior audience.

• Hands-on experience with great attention to details.

• Solid understanding of US IT regulatory requirements is a plus (e.g., OCC Heightened Standards, FFIEC Handbooks, NIST)

• Master’s degree in engineering, ideally in Computer Science.

Nice to have:

• Certifications are a plus (e.g., CRISC, CISA, CISM, CISSP)

What’s in it for you?

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable.

• Leaders who support your development through coaching and managing opportunities.

• Ability to make a difference and lasting impact.

• Work in a dynamic, collaborative, progressive, and high-performing team.

• Opportunities to do challenging work as part of a global team.

• A world-class training program in financial services.

The expected salary range for this particular position is $210,000-$380,000, depending on your experience, skills, and registration status, market conditions and business needs.

You have the potential to earn more through RBC’s discretionary variable compensation program which gives you an opportunity to increase your total compensation, provided the business meets its performance targets and you meet your individual goals.

RBC’s compensation philosophy and principles recognize the importance of a highly qualified global workforce and plays a critical role in attracting, engaging and retaining talent that:

• Drives RBC’s high-performance culture.

• Enables collective achievement of our strategic goals.

• Generates sustainable shareholder returns and above market shareholder value.

#LI-POST

#TECHPJ

Job Skills

Critical Thinking, Cyber Securi