Senior Cyber & Technology Risk Analyst - City National Bank

WHAT IS THE OPPORTUNITY?
The Senior Cyber and Technology Risk Analyst will oversee second line of defense End User Developed Application (EUDA) Governance Program.  End-user Developed Application is an application developed and managed by end-users, such as but not limited to using spreadsheet programs (e.g., Microsoft Excel), database management programs (e.g., Microsoft Access).

The Senior Analyst will help champion the EUDA program by acting as a critical partner guiding stakeholders to embed risk management practices. Position will identify, analyze and report enterprise technology risks for executive level business, Cyber, Technology and information security leadership. The work product will be shared with the Audit and Risk Committee, Royal Bank of Canada, and CNB's regulators. The Senior Analyst will also perform challenge and oversight of the First Line of Defense as a member of the Second Line of Defense.

WHAT WILL YOU DO?

• Acts as a liaison with all three lines of defense to enhance EUDA governance program.
• Analyzes, evaluates and provides strategic guidance and direction for EUDA program to ensure alignment with regulatory requirements and acceptable risk mitigation practices.
• Develops, implements and monitors appropriate EUDA controls and procedures reflecting the standards set forth in the policies and Regulations while accounting for risks inherent in the products, services, types of customers, locations of customers, and functions of the Business Unit. 
• Identifies gaps in controls, proposes solutions, and implements corrective actions.
• Drives projects to implement the necessary changes to policy, procedures and processes in order to align the Business Unit(s) to the Operational Risk practice standards.
• Effectively partners with line of business and needed business areas to solicit information and to mitigate risk.
• Provides support for regulatory examinations and audits by ensuring all requested documentation and information is provided.
• Reports to management on developments and risks/issues identified within assigned programs.
• Regularly provides reports to Manager and Program heads on progress.
• Supports Manager and Business Unit team members in the reporting and resolution of Risk related issues.

WHAT DO YOU NEED TO SUCCEED

Must-Have*

• Bachelor's Degree or equivalent
• Minimum 7 years of experience in Cyber and Technology risk assessment and analysis
• Minimum 4 years of experience with eGRC or equivalent risk or security management system
• Minimum 4 years working for a bank or financial institution.

Skills and Knowledge

• Prior experience with End User Developed Application (can be referred to as End User Computing).
• A plus in being able to manage or supervise a small team for project delivery
• Prefer experience in a Risk Management (2LOD) department along with at least 4 years in banking or financial services, or equivalent experience in a consulting capacity.
• Prefer experience with internal control frameworks for information technology, information security, IT governance frameworks, and conducting and analyzing cyber and technology risk assessments.
• Must be able to effectively articulate ideas through verbal and written communications.
• Experience with MS Excel, Word, PowerPoint, and eGRC systems, such as Archer or RSAM
• Prior experience analyzing and applying regulatory requirements to security practices.
• Familiarity with changes and trends in the regulatory landscape
• Demonstrated organization, facilitation, communication, and presentation skills.
• Demonstrated ability to lead and execute across a range of businesses and functions with differing issues and interdependencies.
• Experience in designing and executing management testing of key controls, evaluating controls for design effectiveness, operating effectiveness, and efficiency.