Director of Product Management, EIAM – Authorization; Global Security

Position: Director of Product Management, EIAM – Authorization (Global Security)

Job Description

What is the opportunity?The Director of Product Management, EIAM – Authorization, is responsible for defining and executing the product strategy for RBC's Enterprise Identity and Access Management (EIAM) Authorization platform and capabilities. This role encompasses policy-driven access control, entitlement management, decision engines, and real-time authorization enforcement across enterprise applications. The Director will drive innovation in authorization technologies, including AI-enhanced policy engines and Just-In-Time (JIT) access models, to enable secure, compliant, and frictionless access decisions horization is the critical enforcement point where identity decisions translate into business and security outcomes.

This role shapes how RBC makes access decisions in real-time, balances security with business agility, and ensures compliance 'll lead the evolution from static, role-based access to dynamic, risk-informed, AI-enhanced authorization that protects the organization while enabling business velocity.
What will you do?
Authorization Platform Product Management

Own end-to-end product strategy and roadmap for authorization capabilities: policy engines, entitlement management, access decision frameworks, and real-time enforcement

Define authorization patterns and standards (ABAC, RBAC, attribute-based policy models) that scale across RBC's diverse application ecosystem

Lead requirements definition for policy information points (PIPs) and policy decision points (PDPs) enabling dynamic, risk-informed access decisions

Establish authorization best practices, frameworks, and guardrails aligned with Zero Trust Architecture principles

Risk-Informed Authorization Strategy

Integrate identity risk scoring, HR performance data, and critical application sensitivity into real-time authorization decisions

Define product requirements for JIT access models that shift from standing access to time-limited, context-aware provisioning

Develop authorization policies that evolve based on risk signals (anomalous behavior, policy violations, regulatory triggers)

Establish audit, logging, and compliance reporting capabilities for all authorization decisions and policy enforcement

Policy & Compliance Management

Drive authorization policy harmonization across lines of business, reducing inconsistency and risk exposure

Ensure authorization capabilities meet regulatory requirements (FRB, Part 30, OSFI, SOX, GLBA)

Define separation of duties (SoD), conflict of interest (CoI), and policy violation detection and remediation workflows

Establish compliance monitoring and 3

LOD independent review processes for authorization controls

Enterprise Integration & Standardization

Define integration patterns for authorization across applications, APIs, microservices, and cloud environments

Lead standardization of authorization frameworks to reduce application sprawl and inconsistent access control implementations

Develop product requirements for API-first authorization services enabling ease of adoption by application teams

Collaborate with architecture and infrastructure teams to embed authorization enforcement at scale

AI-Enhanced Authorization

Define requirements for AI/ML capabilities in authorization: intelligent policy recommendations, anomaly detection, access pattern analysis

Establish governance frameworks for AI-driven authorization decisions, including explainability and audit capabilities

Develop use cases for Agentic AI in policy optimization, entitlement analytics, and access review automation

Ensure responsible AI principles are embedded in authorization product enhancements

Cross-Functional Leadership

Lead product management working groups with Engineering, Architecture, Security, Compliance, and Application Teams

Communicate authorization strategy and product roadmap to executive sponsors and business leaders

Manage relationships with application owners, security teams, and compliance stakeholders

Mentor product management team members on authorization strategy and best practices

What do you need to succeed?
Must-have

12+ years in product management or technical leadership, with minimum 7 years in Identity and Access…