What is the opportunity?
RBC's DevOps team builds the controls that let thousands of engineers ship software into a regulated bank. As Director, DevOps Regulatory Engineering, you'll lead the engineering team that translates regulatory and security expectations into controls in the delivery pipeline, generates the audit evidence that proves those controls work, and manages risk across our software supply chain. You'll be the DevOps counterpart to Application Security and the point of contact for Technology Risk, Group Risk, Internal Audit and regulatory teams when they need to know how software gets built at RBC. This is an engineering leadership role, not a policy role: your team writes the code, and you use AI coding agents daily yourself.
Lead and grow the team
Manage, coach and develop a team of engineers, with clear accountabilities and growth paths for each person
Build a team culture where AI agents are part of everyday engineering, with the checks in place to trust what they produce
Prioritize a mix of engineering delivery, risk requests and audit work against the team's capacity
Engineer pipeline controls and evidence
Translate regulatory, risk and security requirements into automated controls in CI/CD and developer tooling
Design the automated generation of audit evidence so controls prove themselves without manual collection
Define requirements and evidence standards where other platform teams own the implementation, and verify what they build
Secure the software supply chain
Own the roadmap for software supply chain risk: dependency and artifact management, SBOM generation, provenance and integrity, and vulnerability response in the pipeline
Partner with Application Security on tooling, scanning coverage and remediation workflows
Work with vendors when required to close gaps in supply chain tooling and services
Manage regulatory and audit engagement
Lead responses to Internal Audit, Technology Risk and regulatory requests concerning the software development lifecycle
Handle control exceptions and remediation plans, and track findings through to closure
Maintain the mapping between regulatory expectations and the controls in place, and know where the gaps are
Apply AI to the work
Use AI coding agents in building controls, evidence tooling and remediation automation, and set the standard for how the team uses them
Assess the risk and control implications of AI-assisted development for the bank's SDLC
What Do You Need To Succeed
Must Have
Minimum 10+ years in software development or platform engineering, with 3+ years in director-level or equivalent leadership roles
People management experience leading software or platform engineers, with a record of coaching and growing individuals
Daily hands-on use of AI coding agents in your own work, and the ability to discuss in detail how you use them, where they fail and how you verify their output
Solid engineering background in CI/CD, DevOps tooling and cloud platforms, with hands-on experience in Java and Python
Some data engineering experience: building pipelines and working with data platforms such as Snowflake
Experience with software supply chain security: dependency management, artifact repositories, SBOMs, signing and provenance, and vulnerability management
Experience working with application security, technology risk or audit functions, including responding to audits and findings
Ability to read a regulatory or risk requirement, turn it into a technical control, and explain the control back to a non-engineer
Nice to have
Familiarity with OSFI B-13, NIST SSDF, SLSA, SOC 2 or similar frameworks
Shipped an LLM-based capability into production
Led AI adoption across an engineering team and measured its results
Ability to reason about model cost and quality trade-offs when applying LLMs to controls or evidence work
Experience managing vendor relationships for security or supply chain tooling
Experience working in a large regulated organization, such as a bank
What’s in it for you?
We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.
A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable
Leaders who support your development through coaching and managing opportunities
Ability to make a difference and lasting impact
Work in a dynamic, collaborative, progressive, and high-performing team
Flexible work/life balance options
Job Skills
Application Development, Application Maintenance, Applications Architecture, Commercial Acumen, Enterprise Application Delivery, Information Technology Management, Information Technology Trends, Programming Languages, System Applications
Additional Job Details
Address: RBC WATERPARK PLACE, 88 QUEENS QUAY W:TORONTO
City: Toronto
Country: Canada
Work hours/week: 37.5
Employment Type: Full time
Platform: TECHNOLOGY AND OPERATIONS
Job Type: Regular
Pay Type: Salaried
Posted Date: 2026-09-10
Application Deadline: 2026-09-28
Note
Applications will be accepted until 11:59 PM on the day prior to the application deadline date above
Our Employment Opportunities
At RBC, we are guided by living shared values of Client First, Integrity, Collaboration, Respect and Excellence and winning together as One RBC. We believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.
#J-18808-Ljbffr
📌 Director, DevOps Regulatory Engineering (Ontario)
🏢 RBC
📍 Ontario