Recherche d'emploi > Toronto, ON > It security manager

Manager, Cyber Security & IT Risk Management

0000050007 Royal Bank of Canada
TORONTO, Ontario, Canada
88.5K $-110.6K $ / an (estimé)
Temps plein

Job Description

About RBCx RBCx pursues big, bold ideas and leverages RBC’s extensive experience, networks, and capital to help shape what’s next.

Our four pillars Banking, Capital, Platform, and Ventures combine to support tech businesses of all sizes and stages, making us the go-to backer of Canadian innovation.

Our people are our most valuable assets, which is why we invest deeply in making sure RBCx isn’t just a place to work, but a place to belong.

About RBCx Platform - VSS TRM Ventures Shared Services (VSS) is made up of Principle Engineering, Platform Engineering, Business Enablement, Security, and Technology Risk Management (TRM).

Our vision is to empower development, create efficiencies, and alleviate pressure, time and effort that would otherwise be spent on security and risk management by being the face between the enterprise and ventures technology teams in this space.

Our mission is to empower a DevSecOps framework throughout the entire Software Development Lifecycle by being Subject Matter Experts and leading technology teams through industry best practices and enterprise frameworks in this space.

What is the opportunity? VSS TRM is looking to hire a Manager, Cyber Security & IT Risk Management who has 5 key areas of responsibilities - Planning, Design, Development, Operations, and Reporting.

You will be expected to contribute in all 5 areas with the core mandate of enabling RBCx Ventures to achieve its business goals while protecting RBC What will you do? Planning

  • Identify risk requirements during Agile Delivery planning.
  • Support business risk partners with the technology section of business risk assessments
  • Assist with Supplier Risk Management Assessments (SRMA) for technology suppliers.

Design

  • Support technology teams through security components of the Athena process (where risk findings are required)
  • Support technology teams through GCS’ Secure Design Review (where risk findings are required)

Development

  • Execute technology Application / Infrastructure Control assessments and assist with risk findings.
  • Assist with risk findings from Application Security Testing
  • Support technology teams through the Public Cloud Governance process for all technology risk-related items

Operations

  • Assist with enterprise requests (i.e. requests sent to Application Custodians)
  • Support technology teams through IIPM data quality and validation checks
  • Support technology teams through the Ventures Supplier Governance process
  • Assess key controls, processes and procedures that are in place and evaluate that they are operating effectively per policies.
  • Facilitate the creation of technology risk findings via the Issue Management process.

Reporting

  • Generate and manage risk reports and dashboards that provide both an aggregate and per-venture view of security postures & risks.
  • Work with organizational partners to support and enhance risk reporting based on RBC requirements.
  • Identify opportunities in process, procedure, and reporting workflow to improve efficiency through automation or templatization.
  • Create and deliver training sessions on risk processes and procedures.

What do you need to succeed? Must-have

  • Undergraduate degree in business, project management, risk management, or related field, or equivalent work experience
  • A minimum of 7 years of experience in information security and / or information risk management
  • Strong writing and oral communication, presentation, and storytelling skills, and the ability to determine the information and communication needed to keep stakeholders and team members well informed.
  • Demonstrated proficiency in Information Technology Risk Management processes
  • A strong understanding of Cloud Technology, DevOps, and SecOps
  • Results-oriented; able to set and consistently meet high-quality standards while handling a variety of tasks and deadlines simultaneously

Nice-to-have

  • Professional certification(s) related to information risk management and / or information security such as CRISC, CISSP, CISA
  • Cloud computing certification(s) such as CCSP, CCSK, AWS Certified Security - Specialty
  • Archer or equivalent GRC tools experience
  • Previous experience in the Financial or Insurance sectors
  • Experience in large, matrixed organizations.
  • Experience in fintech or startups leading digital banking, payments, and / or financial product development

What’s in it for you? We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper.

We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

  • A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable
  • Leaders who support your development through coaching and managing opportunities
  • Ability to make a difference and lasting impact
  • Work in a dynamic, collaborative, progressive, and high-performing team
  • A world-class training program in financial services

LI-POST#LI-Hybrid#TECHPJ Job Skills Confidentiality, Cyber Security Management, Decision Making, Detail-Oriented, Encryption Software, Group Problem Solving, High Impact Communication, Information Security Management, Information Technology Security Additional Job Details

Address :

WATERPARK PLACE, 20 BAY ST : TORONTO

City : TORONTO

TORONTO

Country : Canada

Canada

Work hours / week : 37.5

37.5

Employment Type : Full time

Full time

Platform :

Technology and Operations

Job Type : Regular

Regular

Pay Type : Salaried

Salaried

Posted Date : 2024-06-04

2024-06-04

Application Deadline :

2024-06-18

I nclusion and Equal Opportunity Employment

At RBC, we embrace diversity and inclusion for innovation and growth. We are committed to building inclusive teams and an equitable workplace for our employees to bring their true selves to work.

We are taking actions to tackle issues of inequity and systemic bias to support our diverse talent, clients and communities.

We also strive to provide an accessible candidate experience for our prospective employees with different abilities. Please let us know if you need any accommodations during the recruitment process.

Join our Talent Community

Stay in-the-know about great career opportunities at RBC. Sign up and get customized info on our latest jobs, career tips and Recruitment events that matter to you.

Expand your limits and create a new future together at RBC. Find out how we use our passion and drive to enhance the well-being of our clients and communities at jobs.rbc.com.

Il y a plus de 30 jours
Emplois reliés
Scotiabank
Toronto, Ontario

As an Audit Manager you will participate in the execution of risk-based technology audits, across Cyber Security, Technology Infrastructure, Digital Banking, Cloud, and Architecture, of medium to high complexity to provide opinions on the effectiveness of controls to meet business objectives. Perfor...

KPMG-Canada
Toronto, Ontario

This role works with Risk and Cyber Security leadership team who are located around the world, as well as regional and national marketing managers, and other functions within the Global Resource Centre including Digital and Social Media teams. Lead the development, management and implementation of k...

Shackleton Duke Group
Toronto, Ontario

The bank’s Cyber Security Maturity Improvement Programme (CSMIP) is designed to strategically address the top cyber threats the bank faces, using advanced technologies and sustainable processes. There are a number of Cyber Security Technology initiatives for to strengthen controls relating to Data ...

KPMG
Canada, Canada

A career within our Cyber Security Services, will provide you with the opportunity to help our clients implement an effective cyber security program that protects against threats, propels transformation, and drives growth. Responsible for applying a security architecture lens to all cyber security s...

Green Shield Canada
Toronto, Ontario

Prepare monthly/quarterly risk reporting on operational risk appetite metrics, key risk indicators, and operational risk dashboards, and other operational risk reporting for presentation to senior leadership, and board committees. Assist the business with the identification of key operational risks ...

The Toronto-Dominion Bank (Canada)
Toronto, Ontario

The Manager, AML Financial Crime Risk Management, Risk and Controls position is within TD Bank Group’s (TDBG) Global Anti-Money Laundering (GAML) Department and reports directly to the Associate Vice-President. Excellent communication skills (verbal and written) with demonstrated ability to conduct ...

Community Trust
Mississauga, Ontario

The responsibilities include working with the IT and Cybersecurity service providers, teams across the three lines of defence, and other stakeholders to design, implement and maintain an IT Risk Management Framework and associated processes that are aligned with CTC’s Enterprise Risk Management Fram...

Deloitte
Toronto, Ontario

This includes, but is not limited to, people with disabilities, candidates from Indigenous communities, and candidates from the Black community in support of living our values, creating a culture of Diversity Equity and Inclusion and our commitment to our AccessAbility Action Plan , Reconciliation A...

Element Fleet Management
Mississauga, Ontario

Element Fleet Management and its wholly owned subsidiaries are an equal opportunity employer committed to diversity, equity, inclusion, and belonging. Element capital project initiatives through the initiation, planning, development, and deployment phases of the SDLC. This role will partner with mem...

CO_30 TC1 Bird Industrial Management Services Ltd.
Mississauga, Ontario

Reporting to the Project Director, the Risk Manager will mainly focus on assessing and limit risk inherent in large-scale nuclear developments. You will ensure the project success by implementing robust risk management strategies against potential disruptions and setbacks, including managing contrac...