City : TORONTO, Ontario, Canada

Category : Technology | Analytics | Research

Industry : Financial/Banking

Employer : RBC

Senior Manager, Vendor IT Risk Governance and Compliance

What is the opportunity?

The Vendor IT Risk (VITR) program’s key mandate is to identify and manage cyber risks to RBC’s data and systems, introduced through relationships with RBC third parties. This role is anchored within the VITR Practice Management team which is responsible for the oversight, and maturity of the VITR program. Reporting to the Director, Vendor IT Risk Practice Management, this role – Senior Manager, Vendor IT Risk Governance and Compliance - will be responsible for managing and driving the maturity of the Vendor IT Risk program, by introducing process efficiencies, and ensuring alignment with regulatory requirements, industry best practices and organizational standards and policies.

What will you do?

• Manage periodic maturity assessments of the VITR program and ensure remediation of identified observations.

• Support strategic planning and provide input on roadmaps

• Work cross functionally with global business units and functional groups such as Third-Party Risk, Privacy, Cybersecurity to promote awareness and deliver business results

• Maintain awareness of regulatory changes that impact the program and ensure alignment with audit and regulatory requirements

• Develop and maintain VITR program framework, including process and procedures and guidelines, through ongoing maintenance, and annual reviews.

• Aid in the development of KPIs, KRIs and analytics that will measure the effectiveness of the program

• Oversee challenge of enterprise processes for accepting risk associated with adverse assessment outcomes

• Champion third party risk awareness and best practice sharing with various stakeholders and aid in the development of vendor IT risk management training modules

What do you need to succeed?

Must-have

• Demonstrated experience in developing and applying leading practices in a large scale Information Security, Technology Risk or Vendor Risk environments;
• Experience in framework, policy and standard development
• Experience in process development and improvement
• Advanced working experience with security control frameworks (e.g. ISO27001, NIST CSF, PCI DSS, etc.);
• Working experience with IT GRC and Risk Management practices/ methodologies;
• Ability to partner with diverse stakeholders in complex scenarios with excellent liaison, communication, influence and presentation skills;
• Experience with Project Management practices in enterprise environments;
• Industry recognized qualifications and certifications in Information Security and/or Risk Management (CISSP, CRISC, FAIR etc.).

What’s in it for you?

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable
• Leaders who support your development through coaching and managing opportunities
• Ability to make a difference and lasting impact
• Work in a dynamic, collaborative, progressive, and high-performing team
• A world-class training program in financial services
• Flexible work/life balance options
• Opportunities to do challenging work

This role is anchored within the VITR Practice Management team which is responsible for the oversight, and maturity of the VITR program. VITR Practice management develops, implements, maintains and reports on tools, processes and methodologies for the program. VITR Practice Management job is to improve program effectiveness by introducing process improvements and efficiencies, leveraging industry best and leading practices that align with RBC organizational requirements and enhance our due diligence capabilities.

The Senior Manager / Manager, Vendor IT Risk Practice Management contributes to the overall success of the VITR Program ensuring goals, plans, and initiatives are executed / delivered in support of the team’s business objectives. This role will primarily support the operational processes and key strategic priorities of the VITR program.TORONTO, Ontario, CanadaCAN-ON-TORONTOCanada37.5Full timeTechnology and OperationsRegularSalaried2023-02-21-08:002023-03-31-07:00