Cyber & Technology Risk Analyst Sr

CYBER & TECHNOLOGY RISK ANALYST SR

WHAT IS THE OPPORTUNITY?

The Senior Cyber and Technology Risk Analyst will oversee second line of defense End User Developed Application (EUDA) Governance Program. End-user Developed Application is an application developed and managed by end-users, such as but not limited to using spreadsheet programs (e.g., Microsoft Excel), database management programs (e.g., Microsoft Access).

The Senior Analyst will help champion the EUDA program by acting as a critical partner guiding stakeholders to embed risk management practices. Position will identify, analyze and report enterprise technology risks for executive level business, Cyber, Technology and information security leadership. The work product will be shared with the Audit and Risk Committee, Royal Bank of Canada, and CNB's regulators. The Senior Analyst will also perform challenge and oversight of the First Line of Defense as a member of the Second Line of Defense.

What you will do

• Acts as a liaison with all three lines of defense to enhance EUDA governance program.
• Analyzes, evaluates and provides strategic guidance and direction for EUDA program to ensure alignment with regulatory requirements and acceptable risk mitigation practices.
• Develops, implements and monitors appropriate EUDA controls and procedures reflecting the standards set forth in the policies and Regulations while accounting for risks inherent in the products, services, types of customers, locations of customers, and functions of the Business Unit.
• Identifies gaps in controls, proposes solutions, and implements corrective actions.
• Drives projects to implement the necessary changes to policy, procedures and processes in order to align the Business Unit(s) to the Operational Risk practice standards.
• Effectively partners with line of business and needed business areas to solicit information and to mitigate risk.
• Provides support for regulatory examinations and audits by ensuring all requested documentation and information is provided.
• Reports to management on developments and risks/issues identified within assigned programs.
• Regularly provides reports to Manager and Program heads on progress.
• Supports Manager and Business Unit team members in the reporting and resolution of Risk related issues.

Must-Have*

• Bachelor's Degree or equivalent
• Minimum 7 years of experience in Cyber and Technology risk assessment and analysis
• Minimum 4 years of experience with eGRC or equivalent risk or security management system
• Minimum 4 years working for a bank or financial institution

Skills and Knowledge

• Prior experience with End User Developed Application (can be referred to as End User Computing).
• A plus in being able to manage or supervise a small team for project delivery
• Prefer experience in a Risk Management (2LOD) department along with at least 4 years in banking or financial services, or equivalent experience in a consulting capacity.
• Prefer experience with internal control frameworks for information technology, information security, IT governance frameworks, and conducting and analyzing cyber and technology risk assessments.
• Must be able to effectively articulate ideas through verbal and written communications.
• Experience with MS Excel, Word, PowerPoint, and eGRC systems, such as Archer or RSAM
• Prior experience analyzing and applying regulatory requirements to security practices.
• Familiarity with changes and trends in the regulatory landscape
• Demonstrated organization, facilitation, communication, and presentation skills.
• Demonstrated ability to lead and execute across a range of businesses and functions with differing issues and interdependencies.
• Experience in designing and executing management testing of key controls, evaluating controls for design effectiveness, operating effectiveness, and efficiency.

Compensation

Starting base salary: $101,231 - $172,355 per year. Exact compensation may vary based on skills, experience, and location. This job is eligible for bonus and/or commissions.

*To be considered for this position you must meet at least these basic qualifications
The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of employees assigned to this job.

Benefits and Perks

At City National, we strive to be the best at whatever we do, including the benefits and perks we offer our colleagues. Get an inside look at our Benefits and Perks.

ABOUT CITY NATIONAL
City National Bank, a subsidiary of Royal Bank of Canada, is the largest bank headquartered in Los Angeles with $92.03 billion in assets as of April 30, 2024. Founded in 1954, City National provides personalized banking, investment and trust services in select markets including Los Angeles, Orange County, San Diego, the San Francisco Bay Area, New York City, Nashville, Atlanta, Delaware, Las Vegas, Washington D.C. and Miami. * In addition, the company and its investment affiliates manage or administer $96.83 billion in client investment assets. City National is dedicated to strengthening communities, and in 2023 alone, the company made more than $11 million in charitable contributions to nonprofits that support the communities it serves.

*City National Bank does business in Miami and the state of Florida as CN Bank.

For more information about City National, visit cnb.com.

EQUAL OPPORTUNITY EMPLOYER & REASONABLE ACCOMMODATION
City National Bank is an equal opportunity employer committed to promoting and maintaining a diverse, equitable and inclusive working environment where differences are valued and encouraged. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status or any other basis protected by the laws or regulations in the locations where we operate or in our Code of Conduct.

If you are a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation for any part of the employment process. Please contact us via email or leave a message at . These contact methods are dedicated to applicants whose disability prevents them from successfully applying online. Only messages left for this purpose will be returned. Responses may take up to two business days

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.