Senior IT Risk Analyst

What is the opportunity?

Do you thrive at the intersection of business, technology, and risk management, and embrace new challenges? Are you passionate about Cyber Security and Information Technology Risk? Are you someone who excels in a spirited team environment, questions the status quo and is naturally driven to seek opportunities for efficiencies and process improvement? If so, then we would love to hear from you.

As a Senior IT Risk Analyst, you will be a member of our Access Control Group (ACG) team supporting RBC's global Wealth Management (WM) and Investor Services (IS) businesses. In partnership with our Group Risk Management (GRM) and Global Cyber Security (GCS) teams, you will act as a trusted advisor to our business stakeholders in their understanding of safe IT practices in their adoption and usage of third-party applications and other IT and data assets, ensuring compliance with regulatory requirements and RBC's policies and standards.

In this role, you will execute on day-to-day activities within the WM/IS ACG team, focused on two primary areas: 1) business adherence to RBC's Identity Access Management (IAM) program, and enablement of application access controls and Provide governance to ensure controls are in place as per the Identity and Access Management Standard, and 2) protection of RBC data assets under the Data Loss Prevention (DLP) program ensuring compliant usage of higher-risk IT assets. You will be responsible for engagement with IT risk partners, business stakeholders and vendors, as well as all aspects of controls requirements documentation, planning and analysis, and will work alongside technology partners for the delivery of control program implementation and on-going compliance.

What will you do?

• Maintain inventory of Third-party, business & IT managed applications, perform data quality assessments and gap analysis, and reconcile changes across data from multiple sources.
• Support the ACG team on all aspects of application on-boarding, including:
  • Manage and prioritize pipeline of applications for onboarding to enterprise tools
  • Facilitate requirements gathering and design sessions with stakeholders (business, technology, and vendors) to understand the access framework and onboard their applications to be reviewed on an automated and regulated frequency
  • Ensure Separation of Duties (SOD) are implemented in application, infrastructure, and data accesses to prevent unauthorized accesses and activities
  • Perform Access Security Baseline reviews to ensure that accesses to application and data are reviewed and signed off prior Production deployment
  • Coordinate verification and certification of on-boarding documents and secure required approvals

• Support periodic attestation campaigns and ensure 100% completeness prior to any expired reviews.
• participate in key projects and initiatives and support the adherence to RBC's Logical Assess Security Standard (LASS) and IT Risk Management framework.

Must have:

• 3-5 yrs. of combined experience working with business and technology stakeholders in Enterprise Identity Access Management, Information Security and/or IT Risk domains

• Strong communication and relationship management skills with the ability to present information effectively to diverse stakeholders.
• Understanding of IT project management methodologies, change management & audit requirements.
• Advanced Microsoft Office Skills (e.g. Microsoft Excel, Access and PowerPoint), working knowledge of Jira, Tableau, Visio and process mapping

Nice to have:

• Experience in Business consulting, CBAP/ PMP/PMI, or Business Administration degree (BComm / MBA)
• Self-motivated with superior prioritization and organizational skills and naturally adept at partnering with peers and colleagues within a global matrix organization.
• Ability to independently organize and manage work and agile mindset to adapt to in a fast-paced environment.
• Critical thinking, analytical and research skills with the ability to rapidly gain understanding of new technologies.

What's in it for you?

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable
• Leaders who support your development through coaching and managing opportunities
• Ability to make a difference and lasting impact
• Work in a dynamic, collaborative, progressive, and high-performing team
• Flexible work/life balance options
• Opportunities to do challenging work
• Opportunities to take on progressively greater accountabilities
• Access to a variety of job opportunities across business and geographies and the opportunity to develop a strong cross enterprise network

Job Skills

Additional Job Details