Director, Security Controls and Assurance (Global Security)

Royal Bank of Canada•Jersey City, NJ

3d•$160,000 - $260,000•Onsite

About The Position

RBC's US Security & Compliance Assurance function is seeking a director to establish and lead our control compliance posture and remediation operations at an enterprise scale. As Director, Security Controls and Assurance (Global Security), you will own the strategic vision and execution of our control governance framework, ensuring we maintain a robust, audit-ready compliance posture across all regulatory obligations (GLBA, NYDFS & NFA) and corporate commitments.

Requirements

7-10 years in the financial services or other regulated industries, working at an operational or management level
Solid understanding of US Regulatory Requirements, particularly the Gramm Leach-Bliley Act (GLBA) and New York Department of Financial Services (NYDFS) Part 500 (23 NYCRR) and National Futures Association (NFA)
Demonstrated ability to build sustainable, transparent relationships and partnerships with control owners, auditors, and cross-functional teams
Genuine interest in cyber security and willingness to develop expertise in security control domains, frameworks, and compliance testing

Nice To Haves

Previous experience working in a Tier 1 bank or similar regulated financial institution
Experience with data analytics, compliance dashboarding, or ARCHER platform

Responsibilities

Responsible for managing testing results remediation plans, tracking the path to green, and driving control compliance across our controls, issues, and findings portfolio.
Partner collaboratively with business and control owners across the enterprise to develop pragmatic remediation strategies and realistic timelines for achieving compliance based on testing outcomes.
Foster a partnership-driven culture that enables control owners to understand their obligations and co-create sustainable solutions balancing risk mitigation with operational efficiency.
Position compliance as a business enabler and competitive advantage, transforming how RBC strengthens its control compliance posture across the organization.
Monitor and track compliance milestones across both regulatory obligations (GLBA, NYDFS Part 500 and NFA examination findings, rule implementation deadlines) and internally committed program milestones (board-approved remediation plans, audit finding closures)—escalating risks ahead of time.
Manage monthly control testing reviews and reports and work across owners to develop remediation roadmaps that trend compliance downward.
Produce regular compliance status reports and dashboards that provide transparent, real-time visibility into compliance posture to senior leadership and audit functions.
Support internal and external audit activities by scheduling, packaging evidence, tracking findings, and coordinating closure signoffs.
Monitor remediation execution by tracking progress against deadlines, identifying overdue items, escalating blockers to the US CISO, and coordinating with T&O operation teams to accelerate closure.
Review records in ARCHER and follow up to ensure correct ownership and closure of issues and risks.