Senior Director- Security, Risk Emerging Threats; Global Security

Overview

Senior Director – Security, Risk & Emerging Threats role focuses on providing strategic guidance and oversight on emerging and complex technology risks, championing security risk as a competitive advantage. The position bridges technical risk assessment, business objectives, and enterprise risk tolerance to develop forward‑looking strategies that anticipate threats across AI systems, infrastructure resilience, and data protection. By embedding risk awareness into innovation processes and decision‑making, the director enables RBC to achieve operational excellence, maintain effective governance, and strengthen global security posture.

• Risk Assessment Execution & Methodology:
  Conduct targeted, data‑driven risk assessments across critical technology domains (AI/ML, systems architecture, data protection, cybersecurity, and third‑party dependencies).
• Develop specialized methodologies for AI, architecture, and data protection risks, aligned with enterprise risk appetite and governance frameworks.
• Strategic Partnership & Global Risk Coordination:
  Serve as a key strategic partner to regional IT risk leads across APAC, EU, and US, providing technical expertise and guidance on complex technology risk matters.
• Collaborate to coordinate global risk assessment initiatives while respecting regional regulatory requirements and risk management practices.
• Threat Landscape Analysis & Incident Assessment:
  Lead external incident and threat analysis to identify emerging risks and attack patterns relevant to financial services.
• Conduct deep‑drive reviews of external incidents (AI system failures, data breaches, and architecture vulnerabilities) to evaluate their applicability and potential impact on RBC’s environment, technology, and AI/data ecosystems.
• Actionable Intelligence & Risk Mitigation:
  Produce threat intelligence and incident briefings for stakeholders, and coordinate response reviews and lessons‑learned exercises to drive control improvements and risk mitigation strategies.
• Executive Reporting & Regulatory Engagement:
  Develop executive‑grade reporting packages for senior management and regulators, presenting global technology risk posture, trends, and mitigation progress.
• Lead the production of quarterly/annual risk management reports and regulatory submissions.
• Strategic Control Environment Enhancement:
  Identify opportunities to strengthen global technology control environment, focusing on AI governance, systems architecture resilience, and data protection frameworks.
• Design and advocate for control improvements aligned with business transformation, regulatory expectations, and industry best practices, while developing implementation guidelines that balance effectiveness, efficiency, and feasibility across the enterprise.
• Compliance & Regulatory Alignment:
  Collaborate with compliance functions to ensure technology risk assessments align with regulatory requirements, supporting governance, control documentation, and reporting.
• Coordinate on interpreting and implementing regulatory guidance for technology, cyber risk, AI governance, and data protection, integrating compliance considerations into risk prioritization and control design decisions.
• Technical Risk Advisory Support:
  Offer expert guidance to issue owners throughout the remediation process, leveraging specialized knowledge in AI, systems architecture, and data protection to address technical risks effectively.

Must have: 10+ years of progressive experience in security engineering or risk advisory roles, with demonstrated ability to identify and exploit vulnerabilities across multiple technical layers (AI/ML, data protection, cloud security, application security, systems architecture, access controls).

• AI & Machine Learning Risk:
  Substantial hands‑on experience with AI/ML systems, including model development, deployment, governance, bias detection, explainability challenges, and control frameworks specific to AI systems in financial services.
• Systems Architecture:
  Deep technical knowledge of enterprise systems architecture, cloud infrastructure, distributed systems, scalability, resilience, disaster recovery, and…