Director, Audit & Regulatory Liaison

RBC; Toronto; On-site; CAD 140,000 - 190,000; Full time

Benefits offered by this job

Bonus program

Flexible benefits

Stock where applicable

Job summary

RBC is looking for a senior leader to manage the Audit and Regulatory Liaison pillar within Wealth Management Technology. You will oversee a small team, drive risk management across IT and operations, and coordinate regulatory responses for audits and exams.

You will partner with Audit and Group Risk Management to improve efficiency and reduce remediation cycles. You will champion SOC1, SOX, and Crown Jewel considerations, and ensure compliant documentation across WMT applications.

Qualifications

• 10+ years experience evaluating general computing controls and IT risk.
• Excellent verbal and written communication, with relationship management skills.
• In-depth knowledge of the global financial regulatory landscape (OSFI, FRB, NYDFS, FINRA, OCC).
• Strong IT and operational risk management processes, methods and tools.
• Solid knowledge of OSs (Unix, Windows, z/OS) and DBs (Oracle, SQL Server, DB2).
• CRISC and CISA certifications demonstrate risk expertise.
• Familiarity with GRC tools (ServiceNow, Archer) is a plus.

Responsibilities

• Lead audit and regulatory engagement by coordinating with stakeholders to submit evidence on time and drive remediation within SLA.
• Serve as central focal point for US Wealth Technology risk activities and coordinate with WMT risk management.
• Monitor and report regulatory compliance through preparation and execution of internal and external presentations.
• Assess application criticality for SOC1, SOX, and Crown Jewel applicability with documentation and remediation tracking.
• Own operational risk program execution, including leading Risk and Control Self Assessments and control testing.
• Build partnerships with Audit and Group Risk Management to improve processes and reduce remediation cycles.

Skills

Regulatory engagement

Risk management

Cyber security

Communication

Operating systems knowledge

Database knowledge

Education

CRISC Certification

CISA Certification

Tools

ServiceNow

Archer

Job description

What is the opportunity?

This role leads the Audit and Regulatory Liaison pillar of the Wealth Management Technology (WMT) 1B risk management function. Technical leader with ~2 direct reports, expert understanding of cyber security risk management, providing control and advisory services to: application development, support teams and the Wealth Management Business. Services provided cover IT & operational risk analysis, risk & compliance exposure reporting, risk awareness & advisory, and regulatory response.

Job Description

This role leads the Audit and Regulatory Liaison pillar of the Wealth Management Technology (WMT) 1B risk management function. Technical leader with ~2 direct reports, expert understanding of cyber security risk management, providing control and advisory services to: application development, support teams and the Wealth Management Business. Services provided cover IT & operational risk analysis, risk & compliance exposure reporting, risk awareness & advisory, and regulatory response.

What will you do?

• Lead audit and regulatory engagement by coordinating with stakeholders to ensure evidence is submitted on time, management receives early issue indication, and remediation activities are completed within SLA timelines. Scope includes periodic audits, regulatory exams, and the annual Wealth Management internal audit plan.
• Lead US Wealth Technology risk management by serving as the central focal point for all USWM IT risk activities. Partner with the broader WMT risk management team to identify, elevate, and ensure adequate management of technology risks across the US Wealth Management technology stack.
• Monitor and report on regulatory compliance by leading preparation and execution of various internal and external, periodic regulatory presentations.
• Assess application criticality by leading a comprehensive review of WMT applications to determine SOC1, SOX, and Crown Jewel applicability, with ongoing documentation and remediation tracking.
• Own operational risk program execution, including leading Risk and Control Self Assessments, coordinating control testing across WMT, and maintaining compliance documentation.
• Build strategic partnerships by developing and maintaining collaborative relationships with Audit and Group Risk Management teams to improve process efficiency and reduce remediation cycles.

What do you need to succeed? Must Have's :

• 10+ years experience evaluating general computing controls (e.g. logical access, patch & configuration management, change & incident management, etc.)
• Expert communication (verbal and written) skills, including strong appreciation of relationship management
• Expert knowledge of the global financial regulatory landscape (e.g. OSFI, FRB, NYDFS, FINRA, OCC)
• Strong knowledge in IT and operational risk management processes, methods and tools
• Strong technical knowledge and experience covering the operating systems (e.g. Unix, Windows, zOS) and database systems (e.g. Oracle, SQL Server, DB2)
• CRISC Certification
• CISA Certification

Nice-to-have

• CISSP certification
• CCSP or CCSK Certifications or demonstrable knowledge
• Knowledge of GRC tools (e.g. ServiceNow, Archer)

What’s in it for you?

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable
• Leaders who support your development through coaching and managing opportunities
• Work in a dynamic, collaborative, progressive, and high-performing team
• Ability to make a difference and lasting impact
• Flexible work/life balance options
• Opportunities to do challenging work
• Opportunities to take on progressively greater accountabilities

Job Skills

Critical Thinking, Cyber Security Management, Detail-Oriented, Information Security Management, Information Technology (IT) Risk, Information Technology (IT) Risk Management, Information Technology Security, Interpersonal Relationship Management, IT Security Architecture, Technology Risk, Technology Risk Management

Additional Job Details

Address: RBC CENTRE, 155 WELLINGTON ST W:TORONTO

City: Toronto

Country: Canada

Work hours/week: 37.5

Employment Type: Full time

Platform: TECHNOLOGY AND OPERATIONS

Job Type: Regular

Pay Type: Salaried

Posted Date: 2026-08-06

Application Deadline: 2026-09-11

Note Applications will be accepted until 11:59 PM on the day prior to the application deadline date above

Our Employment Opportunities

At RBC, we are guided by living shared values of Client First, Integrity, Collaboration, Respect and Excellence and winning together as One RBC. We believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.