Associate Director, CUSO Third Party Risk

Job Summary

Job Description

What is the Opportunity?

The GRM Third Party Risk (TPR) team is accountable for RBC’s enterprise wide Third Party Risk management (TPRM) strategy and framework, enabling RBC to identify, measure, monitor, and mitigate the risks associated with third parties. TPR works with Senior Management across RBC’s business platforms and functions, providing oversight and challenge to ensure effective implementation of TPRM practices in compliance with regulatory and policy requirements.  TPR also provides strategic advice, education, and key practices across RBC. TPR is also accountable to provide insight on RBC’s overall third-party risk profile.

The Combined US Operations (CUSO) Operational Risk team provides independent and objective oversight of operational risk management for RBC’s Combined US Operations (CUSO), ensuring integrated risk management across all operational risk domains. 

The Associate Director, CUSO Third Party Risk, Advisory & Oversight, provides third-party risk oversight and challenge, focusing on our CUSO Business Segments and Functions (E.g., HR, GRM, Finance) and Legal Entities within CUSO.  In addition, the Associate Director is responsible for supporting the design, maintenance, and evolution of a number of key third-party risk controls.

The Associate Director will work in close partnership across the broader Third Party Risk teams to provide full 2LOD TPRM coverage across the enterprise. The Associate Director will work in close partnership with the other members of the TPRM team to provide full 2LOD TPRM coverage across CUSO.  The Associate Director ensures effective CUSO alignment to the RBC’s Supplier Code of Conduct and RBC’s Enterprise Third Party Risk Management framework, related policies, standards and procedures. This role is integral to ensuring strong TPRM practices are in place for CUSO and aligned with OSFI’s B-10 Guideline and all US regulatory requirements related to third party risk management.

What will you do?

• Deliver on the TPRM vision and execute TPR oversight and challenge

• Foster strong stakeholder relationships to enable active and collaborative working relationships

• Drive a culture of integrity and behaviors that align to RBC’s Code of Conduct and professional standards

• Work collaboratively across teams, enabling an engaged workforce who are effective, knowledgeable and adaptable

• Cultivate an environment of continuous personal growth

• Execute scenario-driven and thematic reviews to assess effectiveness of controls across the end-to-end third-party lifecycle

• Review third-party risk related outputs (e.g., pre-contract challenge of engagement risk assessments), risk issues, acceptances and action plans to ensure 1LOD is operating within stated Risk Appetite

• Conduct third-party risk event reviews related to areas of support (wholesale businesses and key functions)

• Support third-party related regulatory examinations related to wholesale businesses and functions

• Leverage internal and external information sources on current and emerging threats to focus 1LOD attention on emerging risk themes and issues

• Contribute to and execute on the vision, strategy and operating model for TPRM, including supporting integration of operational resilience into TPR practices

• Support the design, implementation, and evolution of controls across the third-party lifecycle.

• Support implementation of key ORM initiatives (e.g.: Internal Control Management Policy; Operational Resiliency; NextGen)

• Drive the development, implementation and execution of high-level business requirements

• Identify points of technology integration and opportunities for process and workflow enhancements to drive effective TPRM strategic priorities

• Support the Director of CUSO TPR in organization and execution of the CUSO TPR forums and committees

What do you need to succeed?

• 5+ years of experience in progressively responsible roles in third party risk and financial services industry or highly regulated industry. 

• Relevant University degree

• Advanced quantitative, analytical and problem solving skills

• Strong understanding of the third-party risk governance framework, practices and contract governance

• Knowledge of the overall Third Party Lifecycle and specifically OSFI’s Guideline B10, OCC guidance and other relevant regulatory requirements

• Demonstrated delivery and integration experience – ability to objectively interpret information and define problems/root causes

What’s in it for you?