Ross Zekic

Director, Cyber and Technology Risk Assessments, Global IT Risk @RBC

Toronto, ON, CA

As part of 1 LoD, providing tactical directions on technology & cyber risk assessment practices and aligning IT risk assessment practices globally. Major focus is on developing and implementing operating model for 1 LOD including roles and responsibilities, engagement and delivery models and execution of technology & cyber risk assessments resulting in the risk insights, and controls recommendations that are leveraged by internal process and controls owners. Primary responsibilities: Providing guidance and assisting in execution of the enterprise, regional and Business Units’ IT risk assessments; Providing recommendation on IT controls posture as well as IT controls completeness to manage identified risks; Led the activities relative to a regulatory uplift of the City National Bank’s IT risk assessment practices and built a team of risk professionals, further strengthening ongoing identification of IT emerging risks and assessment of ever-changing cyber threat landscape; Developed and implemented a centralized process for identifying risks and managing risk statements to enable cohesive IT risk management practices; Led a successful development of working Proof-of-Concept (PoC) internal tool to automate risk assessments based on the NIST 3-levels (i.e, BU/Org, Process, and IT) by integrating data analytics capabilities from numerous sources, applicable Risk Acceptance Frameworks (e.g, BU, Enterprise, regional, NFRR, etc.), including Threat Modeling and Actors. Tooling utilized both quantitative and qualitative types; Enhancing engagement models with businesses and three Lines of Defense; Factoring regulatory requirements in the assessment practices / methodologies; Build and manage effective relationships with key stakeholders, team members, and other business, functional and support groups. Collaborate with senior leaders to ensure alignment with the Global Cyber Security initiatives.