Senior Risk Analyst

What is the Opportunity?

As the Senior Risk Analyst, you will safeguard City National Bank's digital assets and technological infrastructure by implementing risk management procedures that secure IT infrastructure and data while meeting compliance and regulatory standards. You will identify and mitigate IT, regulatory, and operational risks, and support the maintenance of operational and IT control procedures.

You will collaborate with a variety of stakeholders and will translate IT risks into actionable insights. You will review key risk indicators (KRI) reports, gather and validate risk metrics, and equip stakeholders with accurate information to drive informed decision making.

This dynamic position provides opportunities for working across the organization and playing a key role in risk mitigation.

What will you do?

• Identify, evaluate, and address risks to ensure regulatory and compliance alignment while supporting the overall risk management framework
• Act as first line of defense, filtering and routing issues to the correct stakeholders
• Own IT risk findings end-to-end, ensuring all dependent tasks are completed and escalated appropriately
• Analytics & Metrics: Validate data accuracy in risk dashboards, prepare monthly reports on issue status and KRIs, and identify critical actions
• Determine appropriate escalation paths and communicate with IT application owners, portfolio managers, and leadership
• Evaluate risks against industry frameworks (PCI, NIST, IS027001, ITGC) document findings in Archer and track remediation in ServiceNow
• Work across IT application owners, portfolio managers, and audit teams without direct authority; communicate risk profiles and business impact clearly
• Control Deficiency Management: Coordinate with stakeholders to log, manage, and track control deficiencies. Assess remediation plans to ensure they are designed to effectively reduce risk and verify that corrective actions are implemented according to plan
• Perform risk-based control assessments to evaluate the design, implementation, and operating effectiveness of IT and Operational Controls.
• Compliance Support: Understand audit functions, evidence workflows, and compensating control processes to support regulatory requirements

What do you need to succeed?

Must have:

• 3+ years of experience in Information/Cyber Security, IT Risk Management, IT Operations, or Technology, with at least 2+ years focused on controls testing, internal audit, quality control, risk management, or compliance
• Degree in Computer Science, Engineering, Business or a related field
• Solid knowledge of IT General Computing Controls and Application Controls
• Experience with Application Control Assessments and Infrastructure Control Assessments
• Experience in design, execution and reporting of Key risk indicators (KRI)
• Experience in first line of defense
• Previous experience explaining controls, risks and gaps to both technical and non-technical audiences, including engaging with vendors and internal teams
• Knowledge of cyber security technologies such as access control solutions, authentication, network security, cryptography, PCI, privacy and data classification/protection
• Excellent written and oral communication skills
• Understanding of third line functions and audit processes (evidence request workflows, compensating controls)
• General awareness of infrastructure risks (IAM, firewalls, network security, database security—SQL/Oracle, cloud)

 
Nice to have:

• Big Four (4) IT risk consulting and/or audit experience
• Accredited certification / designation such as CISA / CISSP / CIA / CRISC or similar
• Knowledge of OSFI, FINRA, SEC, MSRB, FRBNY and OCC rules and regulations
• Strong knowledge of rules, regulations and compliance requirements for the financial services industry concerning hybrid cloud and multiple technology domains
• Experience with Archer findings documentation, and ServiceNow issue tracking

What’s in it for you?
We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable
• Leaders who support your development through coaching and managing opportunities
• Ability to make a difference and lasting impact.
• Work in a dynamic, collaborative, progressive, and high-performing team
• Opportunities to do challenging work
• Opportunities to take on progressively greater accountabilities

#LI-POST

#TECHPJ

Job Skills

Business Continuity and Disaster Recovery (BCDR), Cost-Benefit Analysis (CBA), Cyber Security Management, Firewall Management, Information Security Management, IT Network Security, Operational Delivery, Problem Management, Process Management, Threat Management

Additional Job Details

180 WELLINGTON ST W:TORONTOTorontoCanada37.5Full timeTECHNOLOGY AND OPERATIONSRegularSalaried2026-05-132026-10-22

Note: Applications will be accepted until 11:59 PM on the day prior to the application deadline date above

Our Employment Opportunities

At RBC, we are guided by living shared values of Client First, Integrity, Collaboration, Respect and Excellence and winning together as One RBC. We believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.

RBC is presently inviting candidates to apply for this existing vacancy. Applying to this posting allows you to express your interest in this current career opportunity at RBC. Qualified applicants may be contacted to review their resume in more detail.