Operational Risk Manager - Finance IT, GFT - Halifax

What is the Opportunity

In this hands-on technical role, you will support and provide technology risk control and advisory services to Finance & Audit Technology and CFO Group management. Services include IT & operational risk analysis, risk & compliance reporting, risk awareness & advisory and audit liaison. You will assess and manage to ensure on-going compliance with rapidly evolving technology management policies & standards. Including automation, data analysis, and reporting.

You will be a member of the Finance IT Operational Risk Management team which is collectively responsible for provision of technical services, IT operations engineering, production support, quality engineering, Risk Management and business management across a portfolio of over 100 production applications. You will have ample opportunity to develop your professional skills and positively influence technology risk practices across RBC’s Global Functions Technology (GFT) group.

What will you do?

• Identify and assess IT & operational risks across a large & diverse portfolio of applications, 40% of which are subject to stringent SOX & SOC1 control standards
• Test Controls and document results/conclusions specific to MRA requests, Bank examinations, and/or any Regulatory requests
• Monitor and report on risk exposures, including leading Archer approval Findings meetings that are hosted by the VP, Global Head of Finance IT
• Support Finance IT Director and SMT management on the appropriate treatment of technology risks
• Raise awareness of IT & operational risk, including design and roll-out of tailored IT risk education programs
• Develop an understanding of best risk & control practices by maintaining a professional network across specialist teams such as Cyber Security, Group Risk Management and Internal Audit; act as Finance IT’s ‘point of contact’ for these teams
• Manage Finance IT’s Enhanced Compliance Program (ECP), a major internal IT-driven initiative to drive compliance with current and emerging IT policy & standards.
• Contribute to the development of IT risk competencies, practices and outcomes across GFT

What do you need to succeed?

Must-have:

• Degree level education plus a relevant qualification in risk & information systems control (e.g. CRISC) or cybersecurity (e.g. CISSP) or (e.g. CISA)
• Deep IT technical knowledge and experience covering: operating systems (e.g. Unix, Windows, zOS); database systems (e.g. Oracle, SQL Server, Sybase, DB2) and software security architectures; Knowledge of MS Suite of Apps
• Passion for technology risk management and a desire to continually develop personal and team knowledge
• Thorough understanding of IT service management frameworks such as ITIL or COBIT
• Experience managing multiple projects or internal service delivery, including service level management, process design and skills development planning
• Excellent written & verbal communication skills, with the ability to convey complex technical concepts to general IT and business managers

Nice-to-have:

• Post graduate qualification in computing or cybersecurity or Information technology
• Internal or external IT audit qualification and experience; Operational Risk Management
• Familiarity with DevOps & Cloud concepts, processes and tooling, ORM Framework, Audit; Access and change management processes; SOX/SOC1

What’s in it for you?

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

• Work in a dynamic, collaborative, progressive, and high-performing team
• Ability to make a difference and lasting impact on operational risk management
• Opportunities to do challenging work, engaging with a diverse set of established and emerging technologies
• Build an extensive professional network and exert influence beyond a narrow role mandate
• Support for professional development, including obtaining industry-standard qualifications
• Leaders who support your development through coaching and managing opportunities
• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation.

#LI-POST

Job Skills

Confidentiality, Cyber Security Management, Decision Making, Detail-Oriented, Encryption Software, Group Problem Solving, High Impact Communication, Information Security Management, Information Technology Security

Additional Job Details

120 WESTERN PKY:BEDFORDBedfordCanada37.5Full timeTECHNOLOGY AND OPERATIONSRegularSalaried2026-03-202026-04-30

Note: Applications will be accepted until 11:59 PM on the day prior to the application deadline date above

Our Employment Opportunities

At RBC, we are guided by living shared values of Client First, Integrity, Collaboration, Respect and Excellence and winning together as One RBC. We believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.

RBC is presently inviting candidates to apply for this existing vacancy. Applying to this posting allows you to express your interest in this current career opportunity at RBC. Qualified applicants may be contacted to review their resume in more detail.