Associate Director - Cyber & IT Risk

What is the Opportunity?

Reporting to the Director, Technology Strategy within Group Risk Management Enterprise Resilience Risk (ERR), you will lead Second Line of Defense engagement across all Regulatory Examinations and Regulatory Issue Remediation. This role involves collaborating with global Cyber and Technology Risk, Business Regulatory & Issues Management, US Regulatory Relations, and Global IT Risk (encompassing Global Cyber Security, Technology & Operations) to ensure compliance with regulatory examination requirements across first and second lines of defense. This position offers a high-profile opportunity to work within a dynamic framework, providing broad exposure to Technology and Operational Risk Management.

What will you do?

• Perform review and challenge for all regulatory submissions to ensure accuracy, validity, completeness, and alignment with internal RBC policies, standards, and regulatory requirements.

• Identify areas for improvement through regulatory submission analysis, communicating issues, risks, and control gaps to the broader Second Line of Defense team and subject matter experts to facilitate targeted remediation efforts.

• Coordinate and draft Second Line of Defense Regulatory Exam First Day Letter Requests.

• Plan, execute, and deliver Second Line oversight, review, and challenge for regulatory workstreams within the US.

• Partner with senior leaders in US Operations and Global Technology to ensure integrated regulatory remediation activities.

• Ensure traceability of remediation outputs to root causes and regulatory responses, securing appropriate governance signoffs as necessary.

• Perform review and challenge for regulatory remediation activities to validate alignment with corrective actions and verify documentation of remediation efforts.

• Track and report on trends and gaps within regulatory activity and submissions.

What do you need to succeed?

Must Have

• Undergraduate degree in Technology or Business, followed by a minimum of 7 years of progressively responsible experience in Technology, IT Risk, or IT Internal Audit, including risk analysis and reporting roles.

• Detail-oriented, operationally focused, and action-driven mindset with a commitment to continuous improvement.

• Demonstrated knowledge of regulatory compliance and risk management within the financial services industry.

• Strong interpersonal, influencing, and communication skills, with the ability to effectively engage stakeholders, regulators, and cross-functional teams.

Nice to Have

• Experience within a large, global financial services organization.

• Certifications such as CISSP, CRISC, or other Information Security credentials.

• 5 years of dedicated IT risk management experience.

• Working knowledge of GRC tools (e.g., Archer, ServiceNow).

What’s in it for you?

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

• A comprehensive Total Rewards Program include competitive compensation and flexible benefits, such as 401(k) program with company-matching contributions, health, dental, vision, life, disability insurance, and paid-time off.
• Leaders who support your development through coaching and managing opportunities.
• Ability to make a difference and lasting impact.
• Work in a dynamic, collaborative, progressive, and high-performing team.
• Opportunities to do challenging work.
• Opportunities to build close relationships with clients.

For New York/New Jersey only: The expected salary range for this particular position is $120,000-$200,000, depending on your experience, skills, and registration status, market conditions and business needs.

You have the potential to earn more through RBC’s discretionary variable compensation program which gives you an opportunity to increase your total compensation, provi