Global Head of AI and Data Risk Audit

Job DescriptionThe role provides independent, risk-based assurance over RBC's AI and data governance frameworks, ensuring that AI adoption is responsible, compliant, and aligned with the bank's risk appetite—thereby protecting RBC's reputation, clients, and stakeholders while enabling innovation.Independent Assurance: Assess the design and operating effectiveness of AI governance, model risk management, and AI lifecycle controls across global operationsStrategic Coverage Planning: Develop and maintain the Global AI Audit Coverage Strategy, ensuring comprehensive audit coverage of AI platforms, use cases, and supporting infrastructureRegulatory Compliance: Validate adherence to evolving AI regulations and coordinate responses to regulatory exams and inquiriesRisk Monitoring: Conduct continuous risk monitoring of the AI landscape, identifying emerging risks and reporting to senior leadershipThought Leadership: Position RBC Internal Audit as an industry leader in AI assurance, contributing to standards development and peer collaborationStrategy and PlanningDevelop and Maintain the Global AI Audit Coverage StrategyAnnually refresh the AI Audit Coverage Strategy, ensuring alignment with RBC's AI transformation roadmap, regulatory expectations, and emerging risksDefine audit methodologies for traditional AI/ML, Generative AI, and Agentic AI technologiesConduct risk assessments over AI-related Auditable Entities (AEs), mapping AI models, platforms, and business processes to audit coverageCoordinate with other IA teams (Model Risk, Data, Technology, Operations, Cybersecurity, Compliance) to ensure integrated audit approachLead Annual Audit Planning for AI and Data RiskPartner with Regional Chief Audit Executives (CAEs) to prioritize AI audits based on risk, cycle requirements, and strategic initiativesBalance audit coverage across:2LOD AI Risk Management (AI Risk Governance, Enterprise Model Risk Management)1LOD Centralized AI Governance (AI Group, Data & Analytics, Enterprise Architecture)1LOD Platform Audits (Capital Markets, Wealth Management, Banking, Insurance)Allocate budget and resources for AI and data audits, including co-sourcing arrangementsDefine Audit Methodologies for Emerging AI TechnologiesEstablish audit approaches for Generative AI platforms, AI workbenches, and Agentic AI systemsDevelop testing methodologies for:AI governance frameworks and committee operating modelsModel validation processes (bias testing, fairness metrics, model cards, datasheets)AI lifecycle controls (development, deployment, monitoring, change management)Data governance for AI (lineage, retention, classification, consent, privacy impact assessments)Third-party AI vendor risk managementAI security and resilience (zero-trust architecture, RBAC, output sanitization, drift detection)Regulatory compliance (EU AI Act, Canadian Federal Anti-Fraud Strategy, OSFI guidance)Partner with 2LOD and 1LOD on Evolving AI FrameworksEngage proactively with the AI Risk Governance team and Enterprise Model Risk Management to provide input on framework developmentServe as a trusted advisor to the AI Group on control design and best practicesParticipate in industry forums (e.g., OSFI's Financial Industry Forum on AI) to contribute to AI governance standardsGlobal Audit ExecutionDirect Audit Engagements Across PlatformsOversee execution of AI and data audits across Capital Markets, Wealth Management, Personal & Commercial Banking, Insurance & GAM, and Enterprise Functions.Oversee Audits of AI Governance, Model Risk Management, and AI Lifecycle ControlsAI Governance Audits: Assess the design and effectiveness of governance structures, policies, committee operations (AI Working Forum, Executive AI Council, platform AI committees), and escalation processesModel Risk Management Audits: Evaluate model validation frameworks, ongoing monitoring, model documentation, and validation independenceAI Lifecycle Audits: Review controls for AI development, deployment, monitoring, incident response, and decommissioningCoordinate Integrated Audits with Technology, Operations, Data, Model Risk, and Cybersecurity TeamsLead integrated audits that combine AI-specific testing with broader IT, data, and operational risk assessmentsPartner with:Cyber & IT Risk Audit: AI security controls, cryptography, access managementModel Risk Audit: Model validation, EMRM oversightTechnology Infrastructure Audit: Cloud platforms, disaster recovery, IT asset management supporting AIGlobal Compliance Audit: BSA/AML controls, fair lending, regulatory complianceRegulatory and Compliance OversightMonitor Evolving AI RegulationsTrack and interpret regulatory developments across key jurisdictions (Examples below):European Union: EU AI Act (risk-based classification, prohibited practices, transparency requirements)Canada: Federal Anti-Fraud Strategy, OSFI guidance on model risk and AI governanceUnited States: OCC guidance, FCAC consumer protection, state-level AI regulationsUK: UK AI Bill, FCA expectationsAPAC: MAS AI governance frameworks, Australian Scams Prevention FrameworkAssess implications for RBC's AI programs and audit coverage strategyLead Regulatory Issue Validation and Coordinate Regulatory Exam ResponsesValidate management's remediation of regulatory issues related to AI (e.g., GRM AI Governance issues, Capital Markets AI Governance Framework issues)Coordinate responses to regulatory exams on AI governance, model risk management, and data governanceLiaise with regulatory affairs teams and external auditors to ensure consistent messagingEnsure Audit Coverage Addresses Regulatory Expectations Across JurisdictionsLiaise with Regulators (OSFI, OCC, FCAC, FCA, MAS, etc.)Serve as the primary IA contact for regulatory inquiries on AI and data governancePresent audit findings and observations to regulators during examinationsParticipate in regulatory forums and roundtables on AI risk managementGovernance and ReportingProvide Executive Reporting to the Audit Committee and Risk Committee of the BoardDeliver quarterly presentations on:AI risk profile and emerging trendsStatus of AI audit plan executionKey audit findings and management action plansRegulatory issues and validation statusContinuous risk monitoring insightsPrepare written reports summarizing AI governance maturity, control environment effectiveness, and areas requiring Board attentionPresent AI Risk Profile Assessments and Audit Findings to Senior LeadershipParticipate as IA Observer in Key Governance ForumsMaintain Continuous Risk Monitoring of the AI LandscapeConduct quarterly Continuous Risk Monitoring (CRM) assessments for AI-related Auditable EntitiesAssign risk ratings (Satisfactory, Requires Improvement, Unsatisfactory) and escalate concerns to senior leadershipWhat do you need to succeed?A minimum of 12-15 years of experience in financial sector audit with practice focus and expertise in IT Undergraduate degreeExcellent communication skillsAccountability, leadership, initiative, teamwork, change agent and impact and influence Risk management and audit expertiseIn-depth knowledge of US regulatory landscape and strong working background/experience with key US regulatorsStrong analytical, communication, strategic and creative mindset with strong execution abilityHigh level of general management skills, including leading, negotiating, communication and team buildingEffective interaction/dealing with executives and senior management and ability to maintain a strong relationship with IA staff, partners and external stakeholdersStrong analytical, communication, computer, and interpersonal skillsWhat's in it for you?We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.A comprehensive Total Rewards Program include competitive compensation and flexible benefits, such as 401(k) program with company-matching contributions, health, dental, vision, life, disability insurance, and paid-time off.Leaders who support your development through coaching and managing opportunities.Ability to make a difference and lasting impact.Work in a dynamic, collaborative, progressive, and high-performing team.Opportunities to do challenging work.Opportunities to build close relationships with clients.The expected salary range for this particular position is $200,000-$340,000, depending on your experience, skills, and registration status, market conditions and business needs.You have the potential to earn more through RBC’s discretionary variable compensation program which gives you an opportunity to increase your total compensation, provided the business meets its performance targets and you meet your individual goals.RBC’s compensation philosophy and principles recognize the importance of a highly qualified global workforce and plays a critical role in attracting, engaging and retaining talent that:Drives RBC’s high-performance cultureEnables collective achievement of our strategic goalsGenerates sustainable shareholder returns and above market shareholder value#LI-POSTJob SkillsAdaptability, Auditing, Detail-Oriented, Internal Controls, Interpersonal Relationship Management, Long Term Planning, Multi-Level Communication, Organizational Savvy and Politics, Results-OrientedAdditional Job DetailsAddress:20 KING ST W:TORONTOCity:TorontoCountry:CanadaWork hours/week:37.5Employment Type:Full timePlatform:INTERNAL AUDITJob Type:RegularPay Type:SalariedPosted Date:2026-09-09Application Deadline:2026-10-09Note:Applications will be accepted until 11:59 PM on the day prior to the application deadline date aboveOur Employment OpportunitiesAt RBC, we are guided by living shared values of Client First, Integrity, Collaboration, Respect and Excellence and winning together as One RBC. We believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.Join our Talent CommunityStay in-the-know about great career opportunities at RBC. Sign up and get customized info on our latest jobs, career tips and Recruitment events that matter to you.Expand your limits and create a new future together at RBC. Find out how we use our passion and drive to enhance the well-being of our clients and communities at jobs.rbc.com.RBC is presently inviting candidates to apply for this existing vacancy. Applying to this posting allows you to express your interest in this current career opportunity at RBC. Qualified applicants may be contacted to review their resume in more detail.Job SummaryJob number: R-0000186572Date posted : 2026-09-09Profession: Audit | Compliance | Legal | RiskEmployment type: Full time