Senior Manager, IT Risk & Control , Wealth Management Europe (London)

The IT Risk & Control team, embedded in WII Business Technology T&O, serves as the 1st Line of Defense (1B) for WII IT risks, covering Investor Services and Wealth Management in Europe and Asia. This role supports the implementation of IT Risk Policies and Standards, processes IT Risk Issues in the Archer system, and assists with gap analysis and control design. It provides technical risk advice, ensures IT Risk processes are up-to-date, and partners with stakeholders like application custodians and T&O teams. Additionally, it offers ad-hoc support for Operational Risk Management programs and projects.

This is a permanent, full-time role and requires 4 days in the office at our 10 Fenchurch Avenue, London office.

What will you do?

• IT Risk Issue Management
• Work with IT teams to identify and document risk on the Enterprise Archer system (Risk register).
• Manage own findings portfolio as reviewer (initial review and approval, control over life cycle of risk remediation and risk acceptance, support to risk owners to mitigate slippages).
• Responsible for providing day-to-day support to the application towers with respect to IT risk advice and counsel.
• Continuously mature Issue Management processes and procedures to support the I&TS IT strategy.
• Support Director and SLT management on the appropriate treatment of technology risks.
• IT Risk Policies and Standards Support / Regulatory
• Lead and coordinate Internal and External audits for assigned LOBs as IT Risk Lead.
• Support Applications owners and custodians in understanding, executing, and maintaining the policies, standards, processes and tools to support requests from the broad T&O Operational risk community.
• Drive and support the technical environment in complying with key IT Risk policies, processes, and requirements both by engaging with internal teams and technology partners.
• Conduct and review gap analysis as directed.
• Lead the execution of Operational Risk initiatives as required.
• Risk Identification, Assessment and Measurement
• Conducts and/or supports Risk and Control Assessments, IT Risk Assessments, and other Centre of Governance assessments according to the Enterprise Operational Risk Standard.
• Execute self-assessment and gaps identification against new regulations.
• Project and new initiatives risk assessment.
• Acting as 1st level of review for the assessment of risks stemming from new initiatives and projects.
• Review and approval of Integrated Risk Profile (IRP) & IT Risk Triage.
• Reporting & Analytics
• Monitor on an ongoing basis various report and provide commentary on breaches.
• AI Transformation Priorities
• AI Tool Adoption for Risk: Deploy AI-driven solutions (e.g., anomaly detection, predictive risk analytics) to proactively identify and mitigate threats, ensuring quantifiable risk reduction and operational efficiency gains.
• AI Risk Management: Establish robust frameworks to address AI-specific risks, including model bias, data privacy, and algorithmic transparency, ensuring compliance with emerging regulatory standards.
• Business Partner Enablement: Collaborate with technology and business units to integrate AI risk tools into decision making processes, driving adoption, measuring value (e.g., reduced incident rates), and fostering a risk-aware culture.
• Region Specific activities
• Represent 1st line Application risk in selected RBC risk forum.
• Creation of risk reporting material and presentation in internal Risk forums.

What do you need to succeed?

Must-Have

• Extensive experience in the IT or financial services industry, demonstrating deep domain expertise.
• Relevant professional designation (e.g., CRISC, CISA/ISACA, PRMIA) to validate technical and risk management competencies.
• Strong understanding of the Application Lifecycle, including roles and responsibilities across the process.
• Proven ability to influence and collaborate with senior managers and operational risk groups across RBC.
• Exceptional communication skills (verbal and written), with a focus on relationship management and stakeholder engagement.
• Proficiency in PC and database tools, ensuring technical capability to support risk management activities.

Nice-to-Have

• University degree and/or Information Security Certification (e.g., CISSP, CISM).
• Familiarity with Archer or similar risk management tools for efficient issue tracking and reporting.
• Strong facilitation skills to lead discussions and drive alignment across teams.
• In-depth knowledge of RBC’s organisational structure, T&O processes, and compliance frameworks.
• Self-motivated with excellent time management and organisational skills to handle multiple priorities.
• Strong analytical and problem-solving skills, including qualitative and quantitative analysis capabilities.
• Understanding of organisational change management to support risk-related initiatives.
• Familiarity with IT risk/compliance frameworks (e.g., COSO, COBIT) to ensure alignment with industry standards.

What is in it for you?

We thrive on the challenge to be our best - progressive thinking to keep growing and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

• A comprehensive Total Rewards Program including bonuses, flexible benefits and competitive compensation.
• Leaders who support your development through coaching and managing opportunities.
• Opportunities to work with the best in the field.
• Ability to make a difference and lasting impact.
• Work in a dynamic, collaborative, progressive, and high-performing team.
• A world-class training program in financial services.