Senior Manager, IT Risk & Control , Wealth Management Europe (London)

The IT Risk & Control team, embedded in WII Business Technology T&O, serves as the 1st Line of Defense (1B) for WII IT risks, covering Investor Services and Wealth Management in Europe and Asia.

This role supports the implementation of IT Risk Policies and Standards, processes IT Risk Issues in the Archer system, and assists with gap analysis and control design. It provides technical risk advice, ensures IT Risk processes are up-to-date, and partners with stakeholders like application custodians and T&O teams. Additionally, it offers ad-hoc support for Operational Risk Management programs and projects.

Should you be shortlisted, do please let us know if you have any specific requirements for the interview.

This is a permanent, full-time role and requires 4 days in the office at our 10 Fenchurch Avenue, London office.

What will you do?

IT Risk Issue Management

• Work with IT teams to identify and document risk on the Enterprise Archer system (Risk register).
• Manage own findings portfolio as reviewer (initial review and approval, control over life cycle of risk remediation and risk acceptance, support to risk owners to mitigate slippages).
• Responsible for providing day-to-day support to the application towers with respect to IT risk advice and counsel.
• Continuously mature Issue Management processes and procedures to support the I&TS IT strategy.
• Support Director and SLT management on the appropriate treatment of technology risks.

IT Risk Policies and Standards Support / Regulatory

• Lead and coordinate Internal and External audits for assigned LOBs as IT Risk Lead.
• Support Applications owners and custodians in understanding, executing, and maintaining the policies, standards, processes and tools to support requests from the broad T&O Operational risk community.
• Drive and support the technical environment in complying with key IT Risk policies, processes, and requirements both by engaging with internal teams and technology partners.
• Conduct and review gap analysis as directed.
• Lead the execution of Operational Risk initiatives as required.

Risk Identification, Assessment and Measurement

• Conducts and/or supports Risk and Control Assessments, IT Risk. Assessments, and other Centre of Governance assessments according to the Enterprise Operational Risk Standard.
• Execute self-assessment and gaps identification against new regulations.

Project and new initiatives risk assessment

• Acting as 1st level of review for the assessment of risks stemming from new initiatives and projects.
• Review and approval of Integrated Risk Profile (IRP) & IT Risk Triage.

Reporting & Analytics

• Monitor on an ongoing basis various report and provide commentary on breaches.

AI Transformation Priorities

• AI Tool Adoption for Risk: Deploy AI-driven solutions (e.g., anomaly detection, predictive risk analytics) to proactively identify and mitigate threats, ensuring quantifiable risk reduction and operational efficiency gains.
• AI Risk Management: Establish robust frameworks to address AI-specific risks, including model bias, data privacy, and algorithmic transparency, ensuring compliance with emerging regulatory standards.
• Business Partner Enablement: Collaborate with technology and business units to integrate AI risk tools into decision making processes, driving adoption, measuring value (e.g., reduced incident rates), and fostering a risk-aware culture.

Region Specific activities

• Represent 1st line Application risk in selected RBC risk forum.
• Creation of risk reporting material and presentation in internal Risk forums

• Extensive experience in the IT or financial services industry, demonstrating deep domain expertise.
• Relevant professional designation (e.g., CRISC, CISA/ISACA, PRMIA) to validate technical and risk management competencies.
• Strong understanding of the Application Lifecycle, including roles and responsibilities across the process.
• Proven ability to influence and collaborate with senior managers and operational risk groups across RBC.
• Exceptional communication skills (verbal and written), with a focus on relationship management and stakeholder engagement.
• Proficiency in PC and database tools, ensuring technical capability to support risk management activities.

Nice-to-Have

• University degree and/or Information Security Certification (e.g., CISSP, CISM).
• Familiarity with Archer or similar risk management tools for efficient issue tracking and reporting.
• Strong facilitation skills to lead discussions and drive alignment across teams.
• In-depth knowledge of RBC’s organisational structure, T&O processes, and compliance frameworks.
• Self-motivated with excellent time management and organisational skills to handle multiple priorities.
• Strong analytical and problem-solving skills, including qualitative and quantitative analysis capabilities.
• Understanding of organisational change management to support risk-related initiatives.
• Familiarity with IT risk/compliance frameworks (e.g., COSO, COBIT) to ensure alignment with industry standards.

• A comprehensive Total Rewards Program including bonuses, flexible benefits and competitive compensation
• Leaders who support your development through coaching and managing opportunities
• Opportunities to work with the best in the field
• Ability to make a difference and lasting impact
• Work in a dynamic, collaborative, progressive, and high-performing team
• A world-class training program in financial services.

Agency Notice

RBC Group does not accept agency resumés. Please do not forward resumés to our employees, nor any other company location. RBC Group only pay fees to agencies where they have entered into a prior agreement to do so and in any event do not pay fees related to unsolicited resumés. Please contact the Recruitment function for additional details.

Job Skills AI Risk Management, Application Development, Application Management, Application Security, Audit Management, Cyber Security Management, Information Security Auditing, Information Technology (IT) Risk, IS Audit, IT Network Security, Operational Delivery, Problem Management, Process Management, Risk Assessments, Risk Control, Risk Management, Risk Management Analysis, Threat Management

At RBC, we are guided by living shared values of Client First, Integrity, Collaboration, Respect and Excellence and winning together as One RBC. We believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.