Director, Regulatory Affairs - Global Cyber Security

RBC is seeking a Director, Regulatory Affairs (Global Cyber Security) to serve as the embedded advisor to the CISO on cybersecurity law, regulatory obligations, and governance. You will own our compliance standing under NYDFS Part 500 and SEC cybersecurity rules—managing the annual certification cycle, quarterly attestations, and ongoing regulatory monitoring. This is a critical role interfacing with internal and external auditors, 3 lines of defense, preparing board and regulator reporting, and advising on how regulatory requirements translate into actual security decisions. You'll work across all business entities and technology domains, balancing proactive compliance planning with reactive regulatory demands.

What will you do?

• Serve as the principal regulatory advisor embedded within the CISO organization, providing day-to-day advisory services on cybersecurity regulatory obligations, compliance requirements, and security governance
• Own RBC's enterprise compliance standing under NYDFS Part 500 and SEC cybersecurity rules, including exam readiness, regulatory gap identification, and ongoing monitoring of regulatory developments
• Manage the full regulatory certification cycle—including the annual April 15 NYDFS submission, quarterly compliance reviews, and evidence collection for board and regulator reporting
• Lead the drafting, review, and lifecycle management of cybersecurity policies, standards, and governance documentation across the enterprise
• Partner with the CISO, IT Risk, and Compliance teams to integrate regulatory requirements into security strategy, architecture decisions, and operational processes
• Identify regulatory gaps in RBC's cybersecurity program compared to NYDFS Part 500 and NIST baseline expectations; coordinate remediation with first and second lines of defense and track progress to closure
• Advise on incident response planning, vendor risk management, and cross-functional security initiatives from a regulatory and compliance perspective
• Represent regulatory compliance requirements in product security reviews and cross-enterprise security decision-making

What do you need to succeed?

• 10+ years of proven cyber/risk experience within a Tier 1 bank with deep knowledge of US Regulatory requirements for different financial services entities (i.e., capital markets, retail, consumer)
• 3+ years' experience in strategic relationship management, delivery performance analysis, and negotiations
• Strong business and financial acumen with demonstrated expertise in regulatory compliance frameworks (NYDFS Part 500, SEC cybersecurity rules, NIST standards)
• Financial Services experience in: Wealth Management, Payments, Capital Markets, or similar lines of business

• Certified Regulatory Compliance Manager (CRCM) or similar regulatory certification
• Experience with cybersecurity incident response planning and regulatory reporting cycles

What’s in it for you?

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable
• Leaders who support your development through coaching and managing opportunities
• Ability to make a difference and lasting impact
• Work in a dynamic, collaborative, progressive, and high-performing team
• Flexible work/life balance options
• Opportunities to do challenging work
• Opportunities to take on progressively greater accountabilities
• Access to a variety of job opportunities across business

RBC’s compensation philosophy and principles recognize the importance of a highly qualified global workforce and plays a critical role in attracting, engaging and retaining talent that:

· Drives RBC’s high performance culture

· Enables collective achievement of our strategic goals

· Generates sustainable shareholder returns and above market shareholder value

#LI-Post

#TECHPJ

The good-faith expected salary range for the above position is $160,000 - $260,000 depending on factors including but not limited to the candidate’s experience, skills, registration status; market conditions; and business needs. This salary range does not include other elements that comprise our total compensation package, which includes the following: commission sharing eligibility for select roles, a discretionary bonus, a paid time-off plan, our 401(k) program with company-matching contributions, and our health, dental, vision, life and disability insurance.