Job Title: Associate Director, Cyber and IT Risk Framework Policy and Standards

What is the opportunity?

The Associate Director, Cyber and Technology Risk Framework and Standards will be responsible for supporting the development of Cybersecurity and Information Technology policies and standards by providing challenge and oversight on their design and implementation within a well-defined and communicated framework to mitigate risk to RBC.

As a member of the IT Policy and Standards Office (ITPSO) your responsibilities will include maintaining the framework; managing a comprehensive cyber & technology governance roadmap and the supporting pipeline and schedule; providing subject matter experts with appropriate guidance to ensure that policies and standards are developed and documented in a manner that follows RBC requirements and that supports other policies and standards as required; and ensuring that changes are effectively communicated by responsible parties to allow implementation and compliance.

What will you do?

• Provide primary and comprehensive advisory on RBC's security framework, policies, standards and guidelines to a complex level, and ensure their effective development.
• Contribute to the development of IT Risk governance frameworks, policies, and standards by leveraging existing frameworks and approaches.
• Manage and maintain the Cyber & Technology Governance Roadmap and supporting pipeline and schedule of policy and standards development, updates, and refreshes, that ensures policies and standards are reviewed and updated in a timely manner.
• Maintain the repository of assigned Frameworks, policies, standards, guidelines, glossaries, and regional addendums.
• Work with the regional representatives to coordinate the scanning for regulatory changes, maintain the
• Regulatory Intelligence repository and facilitate the completion of gap analysis against our policies and standards.
• Maintain a supportable opinion on RBC's risk and effectiveness of our policies and standards using analytics, review of IT Issues, Control effectiveness reviews, Key Risk Indicators and assessments as required.
• Support the handling of questions pertaining to cyber and technology policies and standards from regulators,
• and 3rd parties
• Maintain assigned Cyber and IT Risk Governance Domain profiles to provide a strong fact-based opinion on the associated IT Risk.
• Deliver presentations and updates to key business/T&O stakeholders.
• Provide timely insight to business and technology partners on risk and controls, to ensure effective responses and no surprises.
• Request from compliance under reliance compliance model (RCM) - Horizon scanning, Quarterly trigger event assessment and annual regulatory risk assessment for IT/Cyber risk.

What do you need to succeed?

Must-have:

• University degree, or equivalent
• 3 years in the financial services or other regulated industries
• 2 years' experience in development of IT Risk Frameworks, Policies and Standards

Nice to have:

• Experience in working within a large financial service company.
• Experience with industry framework "NIST, COBIT, OSFI, ISO" and global regulatory requirements "OSFI, FFIEC, NYDFS, DORA".
• Certifications: CISA, CISSP, CISM etc.

What's in it for you?

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation
• Leaders who support your development through coaching and managing opportunities
• Work in a dynamic, collaborative, progressive, and high-performing team
• Opportunities to do challenging work
• Flexible work/life balance options

Job Skills

Additional Job Details

Note: Applications will be accepted until 11:59 PM on the day prior to the application deadline date above