Regional Information Technology Risk Officer - VPM

Job SummaryJob DescriptionWhat is the opportunity?The Regional Information Technology Risk Officer will report to the Managing Director of US IT Risk. The US IT Risk team is responsible for providing a comprehensive view of IT Risk across Royal Bank of Canada's US business units - Capital Markets, Wealth Management, Global Asset Management, City National Bank and RBC Bank. The team is responsible for overseeing risk management practices, reporting to the regional Board, conducting risk assessments, ensuring that appropriate controls are in place, and engaging with US regulators on continuous monitoring, exams, and remediation programs.What will you do?Work with Business Unit IT Risk Leads to understand the risks within each business unit and how those risks collectively impact the US regional entity, with primary focus on oversight of the Vulnerability and Patch Management (VPM) processes within the Cybersecurity domain.Function as IT Risk SME for Vulnerability and Patch Management to quantify risk exposures and develop mitigation strategies.Work with IT teams to ensure proper implementation of controls and compliance with policy standards related to monitoring and penetration testing coverage, and timely identification and remediation of system vulnerabilities.Act as a lead to implement and improve internal controls including assessment, reporting, metrics, monitoring and testing to mitigate risks.Establish heightened governance over vulnerability-related findings through regular engagement with the Vulnerability and Patch Management team. Review scope, compensating controls, and overall remediation plan as well as any changes to existing findings, such as extended timeline requests.Develop action plans to address identified control breaches and deficiencies, completing root cause analysis and implementing processes to track, monitor and report issues.Provide guidance on technology risk matters to senior leaders and stakeholders.Strengthen alignment across US business units and leverage best practices for Combined US Operations (CUSO) reporting.Identify key areas of risk and leading risk indicators.Conduct risk assessments to identify, evaluate and prioritize potential risks.Drive control enhancements to improve the risk posture of the US region.Expand and enhance metrics reporting coverage for the CUSO.Contribute to CUSO Domain Risk Profile report.Create and present risk reports for senior management forums.Contribute to the development of Enterprise policies, standards, and metrics, ensuring alignment with US IT risk management requirements.Respond to regulatory inquiries and exams.What do you need to succeed?Must-haveBachelor's degreeMinimum 7-10 years of experience in IT Risk, preferably in large financial services Firms, with knowledge of vulnerability management processes and controlsExperience with vulnerability scanning tools and patch management solutionsExperience with VPM processes, including experience influencing VPM governance and controls.Familiarity with US IT regulatory requirements is a plus (e.g., OCC Heightened Standards, FFIEC Handbooks)Nice-to-haveCertifications are a plus (e.g., CRISC, CISA, CISM, CISSP)Project Management skills are a plusWhat's in it for you?We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable.Leaders who support your development through coaching and managing opportunitiesAbility to make a difference and lasting impact.Work in a dynamic, collaborative, progressive, and high-performing teamA world-class training program in financial servicesFlexible work/life balance optionsOpportunities to do challenging work.The good-faith expected salary range for the above position is $160,000 - $250,000 depending on factors including but not limited to the candidate's experience, skills, registration status; market conditions; and business needs. This salary range does not include other elements of total compensation, including a discretionary bonus and benefits such as a 401(k) program with company-matching contributions; health, dental, vision, life, and disability insurance; and paid time-off plan.RBC's compensation philosophy and principles recognize the importance of a highly qualified global workforce and plays a critical role in attracting, engaging, and retaining talent that:Drives RBC's high-performance culture.Enables collective achievement of our strategic goals.Generates sustainable shareholder returns and above market shareholder value.#LI-POST#LI-HybridJob SkillsBusiness Perspective, Consulting, Data Gathering Analysis, Decision Making, Fraud Management, Internal Controls, Organizational Governance, Process Management, Risk Management, Strategic ThinkingAdditional Job DetailsAddress:

GOLDMAN SACHS TOWER, 30 HUDSON STREET:JERSEY CITYCity:

Jersey CityCountry:

United States of AmericaWork hours/week:

40Employment Type:

Full timePlatform:

TECHNOLOGY AND OPERATIONSJob Type:

RegularPay Type:

SalariedPosted Date:

2024-08-27Application Deadline:

2024-11-01Inclusion and Equal Opportunity EmploymentAt RBC, we embrace diversity and inclusion for innovation and growth. We are committed to building inclusive teams and an equitable workplace for our employees to bring their true selves to work. We are taking actions to tackle issues of inequity and systemic bias to support our diverse talent, clients and communities.

We also strive to provide an accessible candidate experience for our prospective employees with different abilities. Please let us know if you need any accommodations during the recruitment process.Join our Talent Community

Stay in-the-know about great career opportunities at RBC. Sign up and get customized info on our latest jobs, career tips and Recruitment events that matter to you.

Expand your limits and create a new future together at RBC. Find out how we use our passion and drive to enhance the well-being of our clients and communities at jobs.rbc.com.

#J-18808-Ljbffr