Director, Security Controls and Assurance (Global Security)

RBC•Jersey City, NJ

4d•$160,000 - $260,000•Onsite

About The Position

RBC's US Security & Compliance Assurance function is seeking a director to establish and lead our control compliance posture and remediation operations at an enterprise scale. As Director, Security Controls and Assurance (Global Security), you will own the strategic vision and execution of our control governance framework, ensuring we maintain a robust, audit-ready compliance posture across all regulatory obligations (GLBA, NYDFS & NFA) and corporate commitments.

Requirements

7-10 years in the financial services or other regulated industries, working at an operational or management level.
Solid understanding of US Regulatory Requirements, particularly the Gramm Leach-Bliley Act (GLBA) and New York Department of Financial Services (NYDFS) Part 500 (23 NYCRR) and National Futures Association (NFA).
Demonstrated ability to build sustainable, transparent relationships and partnerships with control owners, auditors, and cross-functional teams.
Genuine interest in cyber security and willingness to develop expertise in security control domains, frameworks, and compliance testing.

Nice To Haves

Previous experience working in a Tier 1 bank or similar regulated financial institution.
Experience with data analytics, compliance dashboarding, or ARCHER platform.

Responsibilities

Responsible for managing testing results remediation plans, tracking the path to green, and driving control compliance across our controls, issues, and findings portfolio.
Partner collaboratively with business and control owners across the enterprise to develop pragmatic remediation strategies and realistic timelines for achieving compliance based on testing outcomes.
Monitor and track compliance milestones across both regulatory obligations (GLBA, NYDFS Part 500 and NFA examination findings, rule implementation deadlines) and internally committed program milestones (board-approved remediation plans, audit finding closures)—escalating risks ahead of time.
Manage monthly control testing reviews and reports and work across owners to develop remediation roadmaps that trend compliance downward.
Produce regular compliance status reports and dashboards that provide transparent, real-time visibility into compliance posture to senior leadership and audit functions.
Support internal and external audit activities by scheduling, packaging evidence, tracking findings, and coordinating closure signoffs.
Monitor remediation execution by tracking progress against deadlines, identifying overdue items, escalating blockers to the US CISO, and coordinating with T&O operation teams to accelerate closure.
Review records in ARCHER and follow up to ensure correct ownership and closure of issues and risks.