Control Validation
Contribute to the design and execute compliance testing protocols across assigned functional areas in accordance with approved testing methodologies.
Validate that key and non-key controls are documented, operate as designed, and produce evidence aligned with regulatory and policy expectations.
Document testing results and control observations in audit-ready formats; escape exceptions and control gaps to AD CSM GRC.
Advise on control framework maturity and regulatory alignment; recommend enhancements to AD CSM GRC.
Regulatory Evidence Management
Establish and maintain evidence repositories for assigned regulatory requirements (e.g., OSFI guidance on physical security, insider threat frameworks, vendor risk standards).
Conduct periodic evidence collection, organizing and preserving audit trails, ensuring evidence is complete, current, and appropriate.
Compliance Monitoring
Monitor functional teams’ adherence to enterprise policies, standards, as well as CSM procedures and guidelines.
Identify gaps / variances between policy requirements and operational practice; document findings and recommend remediation timelines.
Track progress of remediation activities and validate issue closure.
Audit Readiness & Reporting
Prepare compliance status reports on internal audit issues, regulatory exams, self-identified issues etc. for GRC leadership (as required).
Support audit fieldwork and inquiries.
Stakeholder Engagement
Partner with functional team leads (Physical Security, Employee and Executive Protection, Incident Management, Physical Security Operating Centre and Insider Risk) to understand control design, clarify requirements,
and obtain evidence.
Communicate compliance expectations, timelines, and findings in clear, actionable terms.
Translate approved Policies and Standards into testable control criteria to support compliance assessment activities.
What do you need to succeed?
Must have:
4+ years of compliance, internal audit, Governance or Risk experience in financial services or banking.
Experience with control design, compliance testing methodology, and evidence documentation.
Knowledge of regulatory frameworks relevant to physical security, insider risk, and/or vendor risk management (OSFI, ISO 27001, NIST, SOC 2, and GDPR, CSA, PIPEDA, SOX, or equivalent).
Familiarity with enterprise-level GRC and supplier risk tools (e.g., Archer, ServiceNow, or similar).
Strong written and oral communication skills; ability to translate technical compliance concepts for diverse audiences.
Detail-oriented with strong organizational and project management capabilities.
Nice to have
CIA (Certified Internal Auditor), CISA, or equivalent professional certification.
Experience in a corporate security or physical security compliance environment.
Experience working in a matrixed organization with global teams and varied regulatory jurisdictions.
Working Environment
Operates independently with guidance from GRC leadership.
Engages across multiple functional teams; requires strong stakeholder collaboration and influence without direct authority.
Works with sensitive and confidential data; requires security clearance appropriate to role.
Job Skills
Audits Compliance, Critical Thinking, Data Gathering Analysis, Decision Making, Industry Knowledge, Internal Controls, Interpersonal Relationship Management, Product Services, Risk Management, Strategic Thinking
Additional Job Details
Address: 16 YORK ST:TORONTO
City: Toronto
Country: Canada
Work hours/week: 37.5
Employment Type: Full time
Platform: TECHNOLOGY AND OPERATIONS
Job Type: Regular
Pay Type: Salaried
Posted Date: 2026-06-10
Application Deadline: 2026-08-28
Note
Applications will be accepted until 11:59 PM on the day prior to the application deadline date above
Our Employment Opportunities
At RBC, we are guided by living shared values of Client First, Integrity, Collaboration, Respect and Excellence and winning together as One RBC. We believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and chance for all.
#J-18808-Ljbffr
📌 Senior Compliance Analyst, Corporate Security Management (GLOBAL SECURITY) (Ontario)
🏢 RBC
📍 Ontario