Job DescriptionWhat is the opportunity?The Director of Vulnerability Engineering leads the application and data engineering teams responsible for building and operating the platform that enables application teams to manage vulnerabilities end-to-end. This platform will also serve as the home for Exposure Management and reporting. The team also supports internal automation, AI skills, and controls engineering. The role reports to the Sr. Principal, Vulnerability and Exposure Management.
This is a team full of initiative and momentum - we're shipping a platform that will change how thousands of engineers interact with vulnerability data. You'll have the rare opportunity to lead both application and data engineering in a space where AI, automation, and graph technologies are being applied to real security problems at enterprise scale. If you want to build products that matter, not just maintain systems, this is the role.
What will you do?- Oversees the execution of enterprise wide application security services, including secure design, testing, remediation, and training, ensuring alignment with organizational standards and objectives.
- Provides strategic leadership in implementing security frameworks, tools, and processes to address complex security challenges and drive innovation.
- Manages budgets and resource allocation to ensure operational efficiency, compliance with policies and adherence to regulatory requirements.
- Cultivates stakeholder relationships to influence strategic decisions and promote the adoption of secure application practices across the organization.
- Manages application security initiatives of significant complexity, applying advanced technical expertise to solve abstract problems, and making independent decisions across business units.
- Makes independent decisions on program, technical or operational strategy for the department, providing leadership, coaching and mentorship through senior managers and managers. Sets strategic direction for the department or area receiving high level direction from senior leaders.
- Drives innovation across areas of responsibility identifying opportunities for making operational changes and practices, solving highly complex problems broadly related to application security.
- Leads cross functional collaboration efforts, fostering strong internal relationships across the organization and external relationships to drive business outcomes.
- Lead and Develop Talent: Lead and develop the application and data engineering teams delivering the vulnerability management platform.
- Design and Deliver: Partner with product on the design of platform capabilities, then build and operationalize them to enable application teams to manage vulnerabilities end-to-end.
- Exposure Management: Define and execute the engineering roadmap for Exposure Management and reporting capabilities within the platform
- Automation and AI: Deliver internal automation and AI skills that accelerate vulnerability assessment, prioritization, and resolution
- Controls Validation: Manage the engineering lifecycle for the automation of controls validation, ensuring controls are working as expected
- Cross-functional Partnership: Partner across Technology and Operations to translate requirements into scalable engineering solutions
- Engineering Standards: Establish engineering standards, delivery practices, and technical governance across the team
- Talent Growth: Attract, retain, and grow engineering talent across application development and data engineering disciplines.
What do you need to succeed?Must Have- 6+ years of experience in software engineering with progressive leadership responsibility
- Experience leading application and data engineering teams in an enterprise environment
- Experience designing and delivering platforms that support end-to-end operational workflows
- Working familiarity with data modeling, graph databases, or knowledge graph architectures
- Experience building and operationalizing automation at scale
- Ability to partner with product and translate business requirements into engineering delivery
- Effective stakeholder management skills across technical and non-technical audiences
- Experience working within regulated industries (financial services preferred)
Nice to have- Understanding of vulnerability management, exposure management, or cybersecurity operations
- Experience with AI/ML integration, LLM-based tooling, or intelligent automation
- Familiarity with security control frameworks and control validation methodologies
- Experience with graph technologies such as Neo4j, Neptune, or similar
- Prior experience in a financial institution or similarly regulated enterprise
- Familiarity with agile delivery practices and engineering governance at scale
What's in it for you?We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.
- A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable
- Leaders who support your development through coaching and managing opportunities
- Ability to make a difference and lasting impact
- Work in a dynamic, collaborative, progressive, and high-performing team
- A world-class training program in financial services
- Flexible work/life balance options
- Opportunities to do challenging work
#LI-POST
#TECHPJ
Job SkillsApplication Security, Collaboration, Computer Engineering, Cyber Security Management, Decision Making, Information Security Management, Information Technology Security, Infrastructure Penetration Testing, IT Security Architecture, IT Systems Integration, Leadership, Security Engineering, Security Information and Event Management (SIEM)
Additional Job DetailsAddress:16 YORK ST:TORONTO
City:Toronto
Country:Canada
Work hours/week:37.5
Employment Type:Full time
Platform:TECHNOLOGY AND OPERATIONS
Job Type:Regular
Pay Type:Salaried
Posted Date:2026-09-04
Application Deadline:2026-09-30
Note: Applications will be accepted until 11:59 PM on the day prior to the application deadline date above
RBC is presently inviting candidates to apply for this existing vacancy. Applying to this posting allows you to express your interest in this current career opportunity at RBC. Qualified applicants may be contacted to review their resume in more detail.
