Senior Risk Analyst - RBC, Toronto

About the role

As the Senior Risk Analyst at RBC, you will safeguard City National Bank's digital assets and technological infrastructure by implementing risk management procedures that secure IT infrastructure and data while meeting compliance and regulatory standards. You will identify and mitigate IT, regulatory, and operational risks, and support the maintenance of operational and IT control procedures. You will collaborate with a variety of stakeholders and will translate IT risks into actionable insights while reviewing key risk indicators reports.

Your impact

In this dynamic position providing opportunities for working across the organization and playing a key role in risk mitigation, you will undertake the following responsibilities:

• Identify, evaluate, and address risks to ensure regulatory and compliance alignment while supporting the overall risk management framework
• Act as first line of defense, filtering and routing issues to the correct stakeholders
• Own IT risk findings end-to-end, ensuring all dependent tasks are completed and escalated appropriately
• Validate data accuracy in risk dashboards, prepare monthly reports on issue status and KRIs, and identify critical actions
• Determine appropriate escalation paths and communicate with IT application owners, portfolio managers, and leadership
• Evaluate risks against industry frameworks (PCI, NIST, IS027001, ITGC) document findings in Archer and track remediation in ServiceNow
• Work across IT application owners, portfolio managers, and audit teams without direct authority; communicate risk profiles and business impact clearly
• Coordinate with stakeholders to log, manage, and track control deficiencies and assess remediation plans
• Perform risk-based control assessments to evaluate the design, implementation, and operating effectiveness of IT and Operational Controls
• Understand audit functions, evidence workflows, and compensating control processes to support regulatory requirements

Requirements

To succeed in this position, you must meet the following mandatory qualifications:

• 3+ years of experience in Information/Cyber Security, IT Risk Management, IT Operations, or Technology, with at least 2+ years focused on controls testing, internal audit, quality control, risk management, or compliance
• Degree in Computer Science, Engineering, Business or a related field
• Solid knowledge of IT General Computing Controls and Application Controls
• Experience with Application Control Assessments and Infrastructure Control Assessments
• Experience in design, execution and reporting of Key risk indicators (KRI)
• Experience in first line of defense
• Previous experience explaining controls, risks and gaps to both technical and non-technical audiences, including engaging with vendors and internal teams
• Knowledge of cyber security technologies such as access control solutions, authentication, network security, cryptography, PCI, privacy and data classification/protection
• Excellent written and oral communication skills
• Understanding of third line functions and audit processes (evidence request workflows, compensating controls)
• General awareness of infrastructure risks (IAM, firewalls, network security, database security, cloud)

Nice to have qualifications include:

• Big Four (4) IT risk consulting and/or audit experience
• Accredited certification or designation such as CISA, CISSP, CIA, CRISC or similar
• Knowledge of OSFI, FINRA, SEC, MSRB, FRBNY and OCC rules and regulations
• Strong knowledge of rules, regulations and compliance requirements for the financial services industry concerning hybrid cloud and multiple technology domains
• Experience with Archer findings documentation, and ServiceNow issue tracking

Benefits

Working at RBC provides a comprehensive Total Rewards Program and a supportive environment designed to help you grow:

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable
• Leaders who support your development through coaching and managing opportunities
• Ability to make a difference and lasting impact
• Work in a dynamic, collaborative, progressive, and high-performing team
• Opportunities to do challenging work
• Opportunities to take on progressively greater accountabilities