IAM Director - Customer Identity Access Management Controls; Global Security

Job Description What is the opportunity?

As IAM Director of Customer Identity Access Management Controls, you will manage the day-to-day operations and effectiveness of RBC’s customer-facing identity and access management security programs. You will assess risks associated with potential threats and develop controls to eliminate or minimize risks through CIAM product alignment. This role has enterprise-wide impact, driving compliance with RBC Standards and regulatory requirements while enabling secure customer access to RBC services.

• Design, create, and maintain enterprise-wide IAM control process models and frameworks aligned with RBC Standards and regulatory requirements.
• Lead periodic control testing activities across all customer IAM services, ensuring compliance with established policies and industry standards.
• Review and update IAM control procedures to ensure alignment with evolving regulatory landscapes and RBC governance frameworks.
• Conduct comprehensive analysis of audit findings and security risk assessments related to customer IAM controls.
• Provide recommendations and remediation strategies to address identified control gaps and security risks.
• Collaborate with internal audit, risk management, and compliance teams to support audit, regulatory, and third-party inquiries.
• Draft reports and presentations for executive forums to communicate IAM control status, risks, and strategic initiatives.
• Identify opportunities for cost savings and operational efficiencies in IAM control testing and assurance processes.
• Provide technical leadership and consultative services to business partners and application teams on customer IAM requirements.
• Function as escalation point for resolution of IAM control-related incidents and complex issues.
• Monitor and report on IAM control compliance metrics, KPIs, and SLAs to ensure alignment with RBC risk appetite.

• Minimum 6+ years in delivery or support roles within IT risk and controls.
• 5+ years’ experience in IAM process modeling, controls implementation, and compliance.
• 3+ years in customer identity and access management or related domains.
• Knowledge of regulatory frameworks and compliance requirements.
• Demonstrated experience in control testing methodologies and audit support.
• Change Leadership – ability to drive adoption of new IAM control standards and practices.
• Impact & Influence – capacity to influence stakeholders at all organizational levels.
• Achievement Motivation – drive to deliver results and continuous improvement.
• Business Acumen – ability to balance technical requirements with business needs.
• Analytical Thinking – strong capability to assess complex control environments and identify risks.
• Relationship Building – skill in developing and maintaining effective stakeholder partnerships.
• Conceptual Thinking – capacity to develop frameworks and strategic approaches to IAM controls.

• Experience with IAM products such as Cyber Ark PAS, SailPoint Identity IQ, and Entra .
• Experience completing application risk assessments.
• Experience with project delivery tools such as Jira, Confluence, and Service Now.
• Professional certification(s) related to information security or information risk management such as CRISC, CISA, CISM, CISSP.

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable.
• Leaders who support your development through coaching and managing opportunities.
• Ability to make a difference and lasting impact.
• Work in a dynamic, collaborative, progressive, and high-performing team.
• A world-class training program in financial services.
• Opportunities to do challenging work.

Critical Thinking, Cyber Security Management, Decision Making, Detail-Oriented, Information Security Management, Information Technology Security, Interpersonal Relationship Management, IT Security Architecture, Performance Management (PM)