Senior Director, US Cybersecurity Services

About the role

This position represents a strategic leadership opportunity to shape cybersecurity excellence and risk management across RBC’s US operations. As the Senior Director of US Cybersecurity Services, you will serve as an enterprise leader and peer-level partner to the organization's cyber leadership, translating complex US regulatory requirements and industry frameworks (NIST, FFIEC) into strategic cyber capabilities that drive both security excellence and business growth. This is a critical role that directly influences the strategy, maintains regulatory standing, and protects enterprise assets. You will own accountability for ensuring all US operations maintain a strong security posture, operate within regulatory guardrails, and leverage cyber capabilities as a competitive advantage.

Responsibilities

• Strategic Leadership & Governance of US Cybersecurity Services
  • Lead and manage the US cybersecurity services team to ensure consistent delivery of security services and compliance with regulatory requirements across all US legal entities.
  • Oversee adherence to security best practices and alignment with both enterprise standards and local regulatory expectations.
  • Maintain a resilient, compliant security infrastructure and ensure accountability for cyber risk management across the region.
• Shape and Operationalize Cybersecurity Solutions
  • Drive end-to-end delivery of cybersecurity solutions that align with US regulatory guidance, industry frameworks, business requirements, and emerging threat landscapes.
  • Serve as the subject matter expert ensuring solutions address both compliance mandates and operational business needs.
  • Ensure that global cyber capabilities are effectively adapted to US requirements and that regulatory obligations are met without unnecessary disruption to business operations.
• Manage and Prioritize Cyber Capability Enhancement Requests
  • Evaluate, prioritize, and advance capability enhancement requests to enterprise cyber teams, providing clear business rationale and risk-based justification for each request.
  • Articulate the technical and business requirements, regulatory drivers, and risk mitigation benefits to support decision-making by enterprise leadership.
• Drive Adoption of New Cybersecurity Services and Controls
  • Drive the adoption of new cybersecurity services and controls across US legal entities by partnering with enterprise teams to develop messaging and implementation strategies that resonate with US business units and support successful deployment.
  • Ensure that new capabilities are effectively operationalized and that the organization maximizes the return on cyber investments.
• Develop and Maintain Multi-Year Cybersecurity Strategy
  • Define and maintain a forward-looking cybersecurity strategy for the US region that aligns with regulatory frameworks, anticipates emerging threats and technologies, and supports long-term organizational objectives.
  • Monitor evolving threat landscapes and regulatory changes to inform strategy updates and ensure the organization remains ahead of emerging risks.
  • Ensure that cyber capabilities, investments, and team development are strategically aligned with the organization's long-term security posture and risk management objectives.

Requirements

• Education & Experience: Bachelor’s Degree with 15+ years of progressive cybersecurity experience with demonstrated advancement to leadership or strategic advisory roles, including cyber architecture and engineering disciplines with reporting to executive management.
• Industry Experience: Minimum 7 years in financial services, banking, or highly regulated industries subject to federal compliance requirements.
• Leadership Track Record: Proven track record leading technical teams, developing staff capabilities, and driving technical excellence.
• Technical Expertise: Strategic knowledge of cybersecurity architecture and design principles across multiple security domains (e.g., vulnerability management, data protection, endpoint security, SOC services, threat management, insider risk). Ability to assess, design, and support