Quantum Safety Lead (Global Security)

RBC•Toronto, ON

5d•Onsite

About The Position

RBC is seeking a Quantum Safety Lead (Global Security) to own the end-to-end execution and governance of our post-quantum cryptography (PQC) migration program. This is a senior, board-visible mandate accountable for moving the organization from quantum threat awareness to a funded, sequenced migration that closes harvest-now-decrypt-later (HNDL) exposure ahead of cryptographically relevant quantum computer (CRQC) timelines. You will lead program delivery across Canadian and U.S. operations, coordinating a matrixed set of technology, risk, and business stakeholders.

Requirements

10+ years in cybersecurity, technology risk, or enterprise program delivery, with prior accountability for enterprise-scale security or infrastructure migration programs
Demonstrated experience operating in regulated financial institutions (G-SIB or equivalent) with exposure to OSFI and U.S. federal banking regulators
Proven ability to lead through influence across matrixed organizations and build board/executive-level narratives on complex technical emerging-risk topics
Track record as a primary point of contact with regulators and industry bodies, managing stakeholder engagement on technical matters
Strong program delivery and governance experience: ability to establish roadmaps, metrics, reporting cadences, and cross-functional accountability

Nice To Haves

Working knowledge of applied cryptography, PKI, and NIST post-quantum standards (ML-KEM, ML-DSA)
Prior experience establishing cryptographic agility or security transformation standards within large technology organizations

Responsibilities

Own the enterprise PQC migration roadmap and delivery execution, partnering with crypto SMEs and services leadership for technical strategy translation
Translate quantum threat horizons (CRQC probability, HNDL exposure, cryptographic maturity) into board and executive narratives, funding asks, and risk appetite decisions
Build and lead a cross-functional delivery structure spanning infrastructure, application, and data domains, driving coordination across enterprise architecture, technology risk, and business technology teams
Establish cryptographic agility as an engineering standard through design patterns, key management modernization, and lifecycle practices embedded in SDLC and vendor governance
Own quantum-related regulatory engagement across multi-jurisdictional footprint (OSFI B-13, NYDFS 23 NYCRR Part 500, OCC, FRB, FINTRAC) and industry standards-body participation
Define and report program-level metrics: cryptographic inventory coverage, migration velocity by asset criticality, third-party PQC readiness, and residual HNDL exposure
Manage third-party and vendor dependency risk by assessing supplier PQC roadmaps and building migration contingencies
Coordinate quantum opportunity initiatives in partnership with innovation and analytics teams, ensuring alignment with broader bank strategy without diluting core PQC safety focus