LEAD IT RISK & OPS ADVISORY

　　WHAT IS THE OPPORTUNITY?

　　"The IT Risk Advisor Lead will be focus on leading the implementing frameworks designed to identify, evaluate, and manage technology-related risks and controls across the aligned Technology business or function. Responsibilities include integrating that framework with business operations and keeping leadership, key stakeholders informed of new and existing technology risks, leading or supporting various programs, including partering with internal teams and businesses on risk and control self-assessment (RCSA), process, risk, and control, and other risk policies, standards, and processes.This individual may be asked to supervise / coach a team of risk professionals and is part of a function that offers an Internal IT Risk Consultancy and acts as Trusted Advisors to IT FLoD to help identify potential risks, risks, how to manage and implement risk management solutions on the following but not limited to safety and security policies, business continuity and recovery.

　　Technology and Innovation Division

　　As a member of City National's Technology & Innovation group, you will drive, develop, and maintain solutions for clients and colleagues. This is an exciting time of technology advancement and innovation across the bank, particularly within our technology teams.

　　What you will do

　　Function as SME for aligned business units, quantify risk exposures within the business including operational, information, third party risk, and technology etcAct as a lead to implement and improve internal controls as part of the risk management framework created by SLoD, which includes assessment, reporting, metrics, monitoring and testing to mitigate risksPlays an active role in partnership with FLoD to develop action plans to address identified control breaches/deficiencies, completing root cause analysis and implementing routines to track, monitor and report issues in compliance with new end-to-end issue management process for effective and timely execution of remediation plansEnsure controls related to technology risk such as payment systems, access management, etc. risk management are sound and effective and implementedSupports internal auditors and regulators to ensure policies, strategies and performance meets enterprise risk and control standards and regulatory expectations.Encourages and fosters a risk-aware culture and mindset among employees, contractors, and service providersTake an active role in supervising, training and developing a team of risk professionals as neededStrong understanding of controls and risk management concepts, including risk assessments and evaluating and testing of internal controlsVendor management/ third party experience requiredBe able to drive change and communicate related policies, procedures, and guidelines; and play a key risk management role in large scale projects"Employs and fosters a risk-aware culture and mindset among employees, contractors, and service providers Supervise, train and develop a team of risk professionals as assigned

　　Must-Have

　　Bachelor's Degree or equivalent10 plus years of experience in IT risk and control or audit function7 plus years of experience in cyber security, payments platform, fraud, and/or technology risk management etc.; risk management, compliance, and/or audit in a highly regulated environment7 plus years of experience working at a major financial institution on audit and/or management initiatives programs, including management responsibilities

　　Skills and Knowledge

　　Experience with process documentation, risk and control assessments, and designing/executing IT General Controls (ITGC), test scriptsExperience and/or knowledge in working with multiple IT risk and controls domains such as identity and access management, privilege success, vulnerability management privacy, incident response etc.Experience and working knowledge of any NQSQL, databases, design, and architectureExperience in designing, implementing, and operationalizing continuous control testing and monitoring of technology controlsCombined experience in IT external audit, IT internal audit and technology risk and/or IT General control assessment for compliance with Sarbanes Oxley (SOX)Understand of the regulatory environment and regulations related to technology risk, and Office of the Comptroller of the Currency (OCC) and Federal Reserve Board (FRB) expectations"Preferred "Big Four" or Large Regional Firm IT audit or risk management consulting experiencePreferred: Professional in Project Management (PMP), Six Sigma Black, Belt or Green Belt professional certifications and/or project management experienceProficient in Microsoft Office Product Suite, SharePointSolid problem solving, analytical (including qualitative analysis), research, and quantitative skillsStrong work ethic, ability to make decisions and work under tight deadlines; goal-oriented and takes initiativesEffective presentation and communication (verbal and written) skillsExperience with process documentation, risk and control assessments, and designing/executing IT General Controls (ITGC), test scriptsUnderstand of the regulatory environment and regulations related to technology risk, and Office of the Comptroller of the Currency (OCC) and Federal Reserve Board (FRB) expectationsExperience and/or knowledge in working with multiple IT risk and controls domains such as identity and access management, privilege success, vulnerability management privacy, incident response etc.Combined experience in IT external audit, IT internal audit and technology risk and/or IT General control assessment for compliance with Sarbanes Oxley (SOX)Experience in designing, implementing, and operationalizing continuous control testing and monitoring of technology controlsAbility to support management with deliverables needed within a complex environment; and make recommendations as neededPossess a consultative/advisory mindset and approach in dealing with key stakeholders across the organization"

　　Compensation

　　Starting base salary: $111,408 - $189,738 per year. Exact compensation may vary based on skills, experience, and location. This job is eligible for bonus and/or commissions.

　　To be considered for this position you must meet at least these basic qualifications

　　The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of employees assigned to this job.

　　Benefits and Perks

　　At City National, we strive to be the best at whatever we do, including the benefits and perks we offer our colleagues. Get an inside look at our Benefits and Perks.

　　INCLUSION AND EQUAL OPPORTUNITY EMPLOYMENT

　　City National Bank is an equal opportunity employer committed to diversity and inclusion. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status or any other basis protected by law.'

　　ABOUT CITY NATIONAL

　　We start with a basic premise: Business is personal. Since day one we've always gone further than the competition to help our clients, colleagues and community flourish. City National Bank was founded in 1954 by entrepreneurs for entrepreneurs and that legacy of integrity, community and unparalleled client relationships continues to drive phenomenal growth today. City National is a subsidiary of Royal Bank of Canada, one of North America's leading diversified financial services companies.