Senior Compliance Analyst, Corporate Security Management (GLOBAL SECURITY)

RBC; Toronto; On-site; CAD 80,000 - 110,000; Full time

Job summary

RBC is seeking an experienced Compliance & Risk professional to design and execute testing protocols across multiple control domains. You will validate control design, document evidence, and support audit readiness while advising on maturity of the GRC framework.

Applicants should have 4+ years in regulation compliance within financial services and be proficient with Archer/ServiceNow or similar vendor risk tools. Strong communication and organizational skills are essential.

Qualifications

• 4+ years of compliance, internal audit, governance or risk experience in financial services or banking.
• Experience with control design, compliance testing methodology, and evidence documentation.
• Knowledge of regulatory frameworks relevant to physical security, insider risk, and/or vendor risk management (OSFI, ISO 27001, NIST, SOC 2, GDPR, CSA, PIPEDA, SOX, or equivalent).
• Familiarity with enterprise-level GRC and supplier risk tools (e.g., Archer, ServiceNow, or similar).
• Strong written and oral communication skills; ability to translate technical compliance concepts for diverse audiences.
• Detail-oriented with strong organizational and project management capabilities.

Responsibilities

• Contribute to design and execute compliance testing protocols across assigned functional areas.
• Validate that controls are documented, operate as designed, and produce evidence aligned with regulatory expectations.
• Document testing results and control observations in audit-ready formats; address exceptions and gaps.
• Advise on control framework maturity; recommend enhancements to GRC processes.
• Establish and maintain evidence repositories for regulatory requirements; ensure completeness and currency.
• Monitor adherence to enterprise policies, standards, and GRC procedures.
• Identify gaps between policy and practice; document remediation timelines and track progress.
• Prepare compliance status reports for GRC leadership and support regulatory exams.
• Engage with stakeholders to understand control design and translate policies into testable criteria.

Skills

Compliance experience

Internal audit

Governance

Risk management

Regulatory knowledge

Documentation

Stakeholder communication

Tools

Archer

ServiceNow

Vendor risk tools

Job description

Control Validation

• Contribute to the design and execute compliance testing protocols across assigned functional areas in accordance with approved testing methodologies.
• Validate that key and non-key controls are documented, operate as designed, and produce evidence aligned with regulatory and policy expectations.
• Document testing results and control observations in audit-ready formats; escape exceptions and control gaps to AD CSM GRC.
• Advise on control framework maturity and regulatory alignment; recommend enhancements to AD CSM GRC.

Regulatory Evidence Management

• Establish and maintain evidence repositories for assigned regulatory requirements (e.g., OSFI guidance on physical security, insider threat frameworks, vendor risk standards).
• Conduct periodic evidence collection, organizing and preserving audit trails, ensuring evidence is complete, current, and appropriate.

Compliance Monitoring

• Monitor functional teams’ adherence to enterprise policies, standards, as well as CSM procedures and guidelines.
• Identify gaps / variances between policy requirements and operational practice; document findings and recommend remediation timelines.
• Track progress of remediation activities and validate issue closure.

Audit Readiness & Reporting

• Prepare compliance status reports on internal audit issues, regulatory exams, self-identified issues etc. for GRC leadership (as required).
• Support audit fieldwork and inquiries.

Stakeholder Engagement

• Partner with functional team leads (Physical Security, Employee and Executive Protection, Incident Management, Physical Security Operating Centre and Insider Risk) to understand control design, clarify requirements, and obtain evidence.
• Communicate compliance expectations, timelines, and findings in clear, actionable terms.
• Translate approved Policies and Standards into testable control criteria to support compliance assessment activities.

What do you need to succeed?

Must have:

• 4+ years of compliance, internal audit, Governance or Risk experience in financial services or banking.
• Experience with control design, compliance testing methodology, and evidence documentation.
• Knowledge of regulatory frameworks relevant to physical security, insider risk, and/or vendor risk management (OSFI, ISO 27001, NIST, SOC 2, and GDPR, CSA, PIPEDA, SOX, or equivalent).
• Familiarity with enterprise-level GRC and supplier risk tools (e.g., Archer, ServiceNow, or similar).
• Strong written and oral communication skills; ability to translate technical compliance concepts for diverse audiences.
• Detail-oriented with strong organizational and project management capabilities.

Nice to have

• CIA (Certified Internal Auditor), CISA, or equivalent professional certification.
• Experience in a corporate security or physical security compliance environment.
• Experience working in a matrixed organization with global teams and varied regulatory jurisdictions.

Working Environment

• Operates independently with guidance from GRC leadership.
• Engages across multiple functional teams; requires strong stakeholder collaboration and influence without direct authority.
• Works with sensitive and confidential data; requires security clearance appropriate to role.

Job Skills

Audits Compliance, Critical Thinking, Data Gathering Analysis, Decision Making, Industry Knowledge, Internal Controls, Interpersonal Relationship Management, Product Services, Risk Management, Strategic Thinking

Additional Job Details

Address: 16 YORK ST:TORONTO

City: Toronto

Country: Canada

Work hours/week: 37.5

Employment Type: Full time

Platform: TECHNOLOGY AND OPERATIONS

Job Type: Regular

Pay Type: Salaried

Posted Date: 2026-06-10

Application Deadline: 2026-08-28

Note

Applications will be accepted until 11:59 PM on the day prior to the application deadline date above

Our Employment Opportunities

At RBC, we are guided by living shared values of Client First, Integrity, Collaboration, Respect and Excellence and winning together as One RBC. We believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.