Director, DevOps Regulatory Engineering

RBC; Toronto; On-site; CAD 180,000 - 260,000; Full time

Benefits offered by this job

Bonuses

Stock options

Flexible benefits

Career development & coaching

Job summary

RBC in Toronto is seeking a Director of DevOps Regulatory Engineering to lead an engineering team that translates regulatory and security expectations into automated controls in the delivery pipeline. You will generate audit evidence and manage risk across the software supply chain, partnering with risk, audit and regulatory teams.

The role combines hands-on engineering with leadership, including using AI coding agents daily, shaping CI/CD tooling, and coordinating with security and risk

Qualifications

• Minimum 10+ years in software development or platform engineering with leadership experience
• Hands-on use of AI coding agents in daily work and ability to discuss their use
• Strong background in CI/CD, DevOps tooling and cloud platforms
• Experience working with application security, technology risk or audit functions
• Ability to translate regulatory or risk requirements into technical controls

Responsibilities

• Lead and grow the team of engineers with clear accountability and growth paths
• Engineer pipeline controls and evidence to automate audit evidence generation
• Secure the software supply chain including SBOM, provenance and vulnerability management
• Manage regulatory and audit engagement with Internal Audit and regulatory bodies
• Apply AI to build controls, evidence tooling and remediation automation

Skills

AI coding agents usage

CI/CD tooling

Java

Python

Snowflake

Regulatory & security controls

Tools

Snowflake

Job description

Job Description

What is the opportunity?

RBC’s DevOps team builds the controls that let thousands of engineers ship software into a regulated bank. As Director, DevOps Regulatory Engineering, you’ll lead the engineering team that translates regulatory and security expectations into controls in the delivery pipeline, generates the audit evidence that proves those controls work, and manages risk across our software supply chain. You’ll be the DevOps counterpart to Application Security and the point of contact for Technology Risk, Group Risk, Internal Audit and regulatory teams when they need to know how software gets built at RBC. This is an engineering leadership role, not a policy role: your team writes the code, and you use AI coding agents daily yourself.

What will you do?

Lead and grow the team

• Manage, coach and develop a team of engineers, with clear accountabilities and growth paths for each person
• Build a team culture where AI agents are part of everyday engineering, with the checks in place to trust what they produce
• Prioritize a mix of engineering delivery, risk requests and audit work against the team’s capacity

Engineer pipeline controls and evidence

• Translate regulatory, risk and security requirements into automated controls in CI/CD and developer tooling
• Design the automated generation of audit evidence so controls prove themselves without manual collection
• Define requirements and evidence standards where other platform teams own the implementation, and verify what they build

Secure the software supply chain

• Own the roadmap for software supply chain risk: dependency and artifact management, SBOM generation, provenance and integrity, and vulnerability response in the pipeline
• Partner with Application Security on tooling, scanning coverage and remediation workflows
• Work with vendors when required to close gaps in supply chain tooling and services

Manage regulatory and audit engagement

• Lead responses to Internal Audit, Technology Risk and regulatory requests concerning the software development lifecycle
• Handle control exceptions and remediation plans, and track findings through to closure
• Maintain the mapping between regulatory expectations and the controls in place, and know where the gaps are

Apply AI to the work

• Use AI coding agents in building controls, evidence tooling and remediation automation, and set the standard for how the team uses them
• Assess the risk and control implications of AI-assisted development for the bank’s SDLC

What do you need to succeed

Must Have

• Minimum 10+ years in software development or platform engineering, with 3+ years in director-level or equivalent leadership roles
• People management experience leading software or platform engineers, with a record of coaching and growing individuals
• Daily hands-on use of AI coding agents in your own work, and the ability to discuss in detail how you use them, where they fail and how you verify their output
• Strong engineering background in CI/CD, DevOps tooling and cloud platforms, with hands-on experience in Java and Python
• Some data engineering experience: building pipelines and working with data platforms such as Snowflake
• Experience with software supply chain security: dependency management, artifact repositories, SBOMs, signing and provenance, and vulnerability management
• Experience working with application security, technology risk or audit functions, including responding to audits and findings
• Ability to read a regulatory or risk requirement, turn it into a technical control, and explain the control back to a non-engineer

Nice to have

• Familiarity with OSFI B-13, NIST SSDF, SLSA, SOC 2 or similar frameworks
• Shipped an LLM-based capability into production
• Led AI adoption across an engineering team and measured its results
• Ability to reason about model cost and quality trade-offs when applying LLMs to controls or evidence work
• Experience managing vendor relationships for security or supply chain tooling
• Experience working in a large regulated organization, such as a bank

What’s in it for you?

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable

• Leaders who support your development through coaching and managing opportunities

• Ability to make a difference and lasting impact

• Work in a dynamic, collaborative, progressive, and high-performing team

• Flexible work/life balance options

Job Skills

Application Development, Application Maintenance, Applications Architecture, Commercial Acumen, Enterprise Application Delivery, Information Technology Management, Information Technology Trends, Programming Languages, System Applications

Additional Job Details

Address

RBC WATERPARK PLACE, 88 QUEENS QUAY W:TORONTO

City

Toronto

Country

Canada

Work hours/week

37.5

Employment Type

Full time

Platform

TECHNOLOGY AND OPERATIONS

Job Type

Regular

Pay Type

Salaried

Posted Date

2026-09-10

Application Deadline

2026-09-28

Note

Applications will be accepted until 11:59 PM on the day prior to the application deadline date above

Our Employment Opportunities

At RBC, we are guided by living shared values of Client First, Integrity, Collaboration, Respect and Excellence and winning together as One RBC. We believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.