Operational Risk Manager - Finance IT, GFT - Halifax
Royal Bank of Canada View all jobs
- Halifax, NS
- Permanent
- Full-time
- Identify and assess IT & operational risks across a large & diverse portfolio of applications, 40% of which are subject to stringent SOX & SOC1 control standards
- Test Controls and document results/conclusions specific to MRA requests, Bank examinations, and/or any Regulatory requests
- Monitor and report on risk exposures, including leading Archer approval Findings meetings that are hosted by the VP, Global Head of Finance IT
- Support Finance IT Director and SMT management on the appropriate treatment of technology risks
- Raise awareness of IT & operational risk, including design and roll-out of tailored IT risk education programs
- Develop an understanding of best risk & control practices by maintaining a professional network across specialist teams such as Cyber Security, Group Risk Management and Internal Audit; act as Finance IT’s ‘point of contact’ for these teams
- Manage Finance IT’s Enhanced Compliance Program (ECP), a major internal IT-driven initiative to drive compliance with current and emerging IT policy & standards.
- Contribute to the development of IT risk competencies, practices and outcomes across GFT
- Degree level education plus a relevant qualification in risk & information systems control (e.g. CRISC) or cybersecurity (e.g. CISSP) or (e.g. CISA)
- Deep IT technical knowledge and experience covering: operating systems (e.g. Unix, Windows, zOS); database systems (e.g. Oracle, SQL Server, Sybase, DB2) and software security architectures; Knowledge of MS Suite of Apps
- Passion for technology risk management and a desire to continually develop personal and team knowledge
- Thorough understanding of IT service management frameworks such as ITIL or COBIT
- Experience managing multiple projects or internal service delivery, including service level management, process design and skills development planning
- Excellent written & verbal communication skills, with the ability to convey complex technical concepts to general IT and business managers
- Post graduate qualification in computing or cybersecurity or Information technology
- Internal or external IT audit qualification and experience; Operational Risk Management
- Familiarity with DevOps & Cloud concepts, processes and tooling, ORM Framework, Audit; Access and change management processes; SOX/SOC1
- Work in a dynamic, collaborative, progressive, and high-performing team
- Ability to make a difference and lasting impact on operational risk management
- Opportunities to do challenging work, engaging with a diverse set of established and emerging technologies
- Build an extensive professional network and exert influence beyond a narrow role mandate
- Support for professional development, including obtaining industry-standard qualifications
- Leaders who support your development through coaching and managing opportunities
- A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation.