What is the opportunity?

The Director of Data Security Governance is a senior leadership role within the first line of defense, responsible for ensuring that data security controls are effectively executed across the organization. This role drives the operational governance of data protection activities, ensuring that lines of business and technology teams adhere to enterprise policies and standards by translating them into practical guidelines, procedures, and control objectives.

What will you do?

• Translate corporate data security policies and standards (set by the second line) into practical first line execution frameworks, including guidelines and reference materials.
• Develop data security control objectives that clearly articulate the outcomes each control must achieve to meet legal, regulatory and business requirements.
• Build a first line governance program to monitor, report, and improve the execution of data security controls globally.
• Provide executive-level reporting on control performance, highlighting areas of strength, weaknesses, and required remediation activities.
• Lead the creation and maintenance of playbooks, job aids, and guidelines that enable first line teams to operationalize policies and standards effectively.
• Continuously review and update control objectives and key controls to reflect emerging threats, regulatory changes, and technology evolution.
• Act as the primary liaison with second line risk, compliance, and privacy teams for data security matters.
• Prepare and coordinate first line responses for regulatory examinations, internal audits, and external assessments.

What do you need to succeed?

Must-have

• 10+ years of experience in data protection, cybersecurity, or information risk management roles, with at least 5 years in leadership.
• Proven success in first line execution governance in a global financial services environment.
• Strong knowledge of data protection technologies and practices, including:
  • Data Loss Prevention (DLP)
  • Cloud Security and CASB
  • Encryption and key management
  • Tokenization and anonymization
• Experience with control design and operationalization, especially for regulated environments.
• Strong leadership and stakeholder management, with influence across global teams.

Nice-to-have

• CISSP, CISM, CRISC, CISA
• CIPT or CDPSE for privacy/data protection expertise

What’s in it for you?

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

• A comprehensive Total Rewards Program including bonuses, flexible benefits and competitive compensation
• Leaders who support your development through coaching and managing opportunities
• Ability to make a difference and lasting impact
• Work in a dynamic, collaborative, progressive, and high-performing team

#LI-POST

#TECHPJ

Job Skills

Confidentiality, Critical Thinking, Data Privacy, Decision Making, Group Problem Solving, Information Security Management, Information Technology Security, IT Incident Management, Long Term Planning

Additional Job Details

16 YORK ST:TORONTOTorontoCanada37.5Full timeTECHNOLOGY AND OPERATIONSRegularSalaried2025-10-072025-10-28

Note: Applications will be accepted until 11:59 PM on the day prior to the application deadline date above

Inclusion and Equal Opportunity Employment

At RBC, we believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.