Job DescriptionWhat is the opportunity?RBC's DevOps team builds the controls that let thousands of engineers ship software into a regulated bank. As Director, DevOps Regulatory Engineering, you'll lead the engineering team that translates regulatory and security expectations into controls in the delivery pipeline, generates the audit evidence that proves those controls work, and manages risk across our software supply chain. You'll be the DevOps counterpart to Application Security and the point of contact for Technology Risk, Group Risk, Internal Audit and regulatory teams when they need to know how software gets built at RBC. This is an engineering leadership role, not a policy role: your team writes the code, and you use AI coding agents daily yourself.
What will you do?Lead and grow the team- Manage, coach and develop a team of engineers, with clear accountabilities and growth paths for each person
- Build a team culture where AI agents are part of everyday engineering, with the checks in place to trust what they produce
- Prioritize a mix of engineering delivery, risk requests and audit work against the team's capacity
Engineer pipeline controls and evidence- Translate regulatory, risk and security requirements into automated controls in CI/CD and developer tooling
- Design the automated generation of audit evidence so controls prove themselves without manual collection
- Define requirements and evidence standards where other platform teams own the implementation, and verify what they build
Secure the software supply chain- Own the roadmap for software supply chain risk: dependency and artifact management, SBOM generation, provenance and integrity, and vulnerability response in the pipeline
- Partner with Application Security on tooling, scanning coverage and remediation workflows
- Work with vendors when required to close gaps in supply chain tooling and services
Manage regulatory and audit engagement- Lead responses to Internal Audit, Technology Risk and regulatory requests concerning the software development lifecycle
- Handle control exceptions and remediation plans, and track findings through to closure
- Maintain the mapping between regulatory expectations and the controls in place, and know where the gaps are
Apply AI to the work- Use AI coding agents in building controls, evidence tooling and remediation automation, and set the standard for how the team uses them
- Assess the risk and control implications of AI-assisted development for the bank's SDLC
What do you need to succeedMust Have- Minimum 10+ years in software development or platform engineering, with 3+ years in director-level or equivalent leadership roles
- People management experience leading software or platform engineers, with a record of coaching and growing individuals
- Daily hands-on use of AI coding agents in your own work, and the ability to discuss in detail how you use them, where they fail and how you verify their output
- Strong engineering background in CI/CD, DevOps tooling and cloud platforms, with hands-on experience in Java and Python
- Some data engineering experience: building pipelines and working with data platforms such as Snowflake
- Experience with software supply chain security: dependency management, artifact repositories, SBOMs, signing and provenance, and vulnerability management
- Experience working with application security, technology risk or audit functions, including responding to audits and findings
- Ability to read a regulatory or risk requirement, turn it into a technical control, and explain the control back to a non-engineer
Nice to have- Familiarity with OSFI B-13, NIST SSDF, SLSA, SOC 2 or similar frameworks
- Shipped an LLM-based capability into production
- Led AI adoption across an engineering team and measured its results
- Ability to reason about model cost and quality trade-offs when applying LLMs to controls or evidence work
- Experience managing vendor relationships for security or supply chain tooling
- Experience working in a large regulated organization, such as a bank
What's in it for you?We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.
- A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable
- Leaders who support your development through coaching and managing opportunities
- Ability to make a difference and lasting impact
- Work in a dynamic, collaborative, progressive, and high-performing team
- Flexible work/life balance options
#LI-post
#TECHPJ
Job SkillsApplication Development, Application Maintenance, Applications Architecture, Commercial Acumen, Enterprise Application Delivery, Information Technology Management, Information Technology Trends, Programming Languages, System Applications
Additional Job DetailsAddress:RBC WATERPARK PLACE, 88 QUEENS QUAY W:TORONTO
City:Toronto
Country:Canada
Work hours/week:37.5
Employment Type:Full time
Platform:TECHNOLOGY AND OPERATIONS
Job Type:Regular
Pay Type:Salaried
Posted Date:2026-09-10
Application Deadline:2026-09-28
Note: Applications will be accepted until 11:59 PM on the day prior to the application deadline date above
