Director, Regulatory Advisor (Global Security)

Job Description RBC is seeking a Director, Regulatory Advisor (Global Security) to serve as the embedded advisor to the CISO on cybersecurity law, regulatory obligations, and governance. What is the opportunity? As the embedded advisor to the CISO, you will own RBC’s compliance standing under NYDFS Part 500 and SEC cybersecurity rules, managing the annual certification cycle, quarterly attestations, and ongoing regulatory monitoring. You will interface with internal and external auditors, the three lines of defense, board and regulator reporting, and advise on translating regulatory requirements into security decisions across all business entities and technology domains. What will you do? Serve as the principal regulatory advisor embedded within the CISO organization, providing day‑to‑day advisory services on cybersecurity regulatory obligations, compliance requirements, and security governance. Own RBC’s enterprise compliance standing under NYDFS Part 500 and SEC cybersecurity rules, including exam readiness, regulatory gap identification, and ongoing monitoring of regulatory developments. Manage the full regulatory certification cycle—including the annual April 15 NYDFS submission, quarterly compliance reviews, and evidence collection for board and regulator reporting. Lead the drafting, review, and lifecycle management of cybersecurity policies, standards, and governance documentation across the enterprise. Partner with the CISO, IT Risk, and Compliance teams to integrate regulatory requirements into security strategy, architecture decisions, and operational processes. Identify regulatory gaps in RBC’s cybersecurity program compared to NYDFS Part 500 and NIST baseline expectations; coordinate remediation with first and second lines of defense and track progress to closure. Advise on incident response planning, vendor risk management, and cross‑functional security initiatives from a regulatory and compliance perspective. Represent regulatory compliance requirements in product security reviews and cross‑enterprise security decision‑making. What do you need to succeed? Must‑have 10+ years of proven cyber/risk experience within a Tier 1 bank with deep knowledge of US regulatory requirements for different financial services entities (e.g., capital markets, retail, consumer). 3+ years of experience in strategic relationship management, delivery performance analysis, and negotiations. Strong business and financial acumen with demonstrated expertise in regulatory compliance frameworks (NYDFS Part 500, SEC cybersecurity rules, NIST standards). Financial services experience in Wealth Management, Payments, Capital Markets, or similar lines of business. Nice‑to‑have Certified Regulatory Compliance Manager (CRCM) or similar regulatory certification. Experience with cybersecurity incident response planning and regulatory reporting cycles. What’s in it for you? A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable. Leaders who support your development through coaching and managing opportunities. Ability to make a difference and lasting impact. Work in a dynamic, collaborative, progressive, and high‑performing team. Flexible work/life balance options. Opportunities to do challenging work. Opportunities to take on progressively greater accountabilities. Access to a variety of job opportunities across business. Compensation The good‑faith expected salary range for the above position is $160,000 - $260,000 , depending on factors including but not limited to the candidate’s experience, skills, registration status, market conditions, and business needs. This salary range does not include other elements that comprise our total compensation package, which includes commission sharing eligibility for select roles, a discretionary bonus, a paid time‑off plan, our 401(k) program with company‑matching contributions, and health, dental, vision, life and disability insurance. #J-18808-Ljbffr