Associate Director - Cyber & IT Risk

RBC; Toronto; On-site; CAD 110,000 - 150,000; Full time

Job summary

RBC in Toronto seeks a senior risk professional to lead Second Line of Defense engagements across regulatory examinations and remediation efforts. You will coordinate with Global IT Risk, US Regulatory Relations, and related teams to ensure compliant submissions and effective remediation across first and second lines of defense.

The role requires strong analytical skills, stakeholder engagement, and a track record in financial services risk management.

Qualifications

• Undergraduate degree in Technology or Business.
• 7+ years of experience in Technology, IT Risk, or IT Internal Audit.
• Knowledge of regulatory compliance and risk management in financial services.

Responsibilities

• Review regulatory submissions for accuracy, completeness, and alignment with RBC policies and regulatory requirements.
• Identify improvements and communicate risks and control gaps to the Second Line of Defense team for remediation.
• Draft and coordinate Regulatory Exam First Day Letter Requests.
• Oversee and challenge regulatory workstreams in the US.

Skills

Regulatory compliance

IT risk management

Internal audit

Stakeholder engagement

Education

Bachelor's degree in Technology or Business

Job description

What is the Opportunity?

Reporting to the Director, Technology Strategy within Group Risk Management Enterprise Resilience Risk (ERR), you will lead Second Line of Defense engagement across all Regulatory Examinations and Regulatory Issue Remediation. This role involves collaborating with global Cyber and Technology Risk, Business Regulatory & Issues Management, US Regulatory Relations, and Global IT Risk (encompassing Global Cyber Security, Technology & Operations) to ensure compliance with regulatory examination requirements across first and second lines of defense. This position offers a high-profile opportunity to work within a dynamic framework, providing broad exposure to Technology and Operational Risk Management.

Job Description

What will you do?

• Perform review and challenge for all regulatory submissions to ensure accuracy, validity, completeness, and alignment with internal RBC policies, standards, and regulatory requirements.
• Identify areas for improvement through regulatory submission analysis, communicating issues, risks, and control gaps to the broader Second Line of Defense team and subject matter experts to facilitate targeted remediation efforts.
• Coordinate and draft Second Line of Defense Regulatory Exam First Day Letter Requests.
• Plan, execute, and deliver Second Line oversight, review, and challenge for regulatory workstreams within the US.
• Partner with senior leaders in US Operations and Global Technology to ensure integrated regulatory remediation activities.
• Ensure traceability of remediation outputs to root causes and regulatory responses, securing appropriate governance signoffs as necessary.
• Perform review and challenge for regulatory remediation activities to validate alignment with corrective actions and verify documentation of remediation efforts.
• Track and report on trends and gaps within regulatory activity and submissions.

What do you need to succeed?

Must Have

• Undergraduate degree in Technology or Business, followed by a minimum of 7 years of progressively responsible experience in Technology, IT Risk, or IT Internal Audit, including risk analysis and reporting roles.
• Detail-oriented, operationally focused, and action-driven mindset with a commitment to continuous improvement.
• Demonstrated knowledge of regulatory compliance and risk management within the financial services industry.
• Strong interpersonal, influencing, and communication skills, with the ability to effectively engage stakeholders, regulators, and cross-functional teams.

Nice to Have

• Experience within a large, global financial services organization.
• Certifications such as CISSP, CRISC, or other Information Security credentials.
• 5 years of dedicated IT risk management experience.
• Working knowledge of GRC tools (e.g., Archer, ServiceNow).

What's in it for you?

It provides the opportunity to be a part of a high performing experienced team with progressive thinking to deliver trusted advice to help our clients thrive and communities prosper.

• Opportunities to do challenging work utilizing latest technologies
• Opportunities to see measurable results in relatively short term
• Opportunities to take on progressively greater accountabilities
• Opportunities to building close relationships with counterparts across the bank

Job Skills

Business Performance Management, Investment Banking Analysis, Investment Economics, Investment Management Systems, Investment Performance Measurement, Investment Risk, Investment Risk Management, Market Risk, Operational Risks, Performance Management (PM), Quality Management, Risk Management, Standard Operating Procedure (SOP)

At RBC, we are guided by living shared values of Client First, Integrity, Collaboration, Respect and Excellence and winning together as One RBC. We believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.

Additional Job Details

Address: 20 KING ST W:TORONTO

City: Toronto

Country: Canada

Work hours/week: 37.5

Employment Type: Full time

Platform: GROUP RISK MANAGEMENT

Job Type: Regular

Pay Type: Salaried

Posted Date: 2026-06-11

Application Deadline: 2026-09-05

Note: Applications will be accepted until 11:59 PM on the day prior to the application deadline date above