Director, DevOps Regulatory Engineering
Royal Bank of Canada Toronto, Ontario, Canada
Financial Services · 10,001+ employees
About the role
Lead an engineering team to translate regulatory and security requirements into automated CI/CD pipeline controls and audit evidence. Manage software supply chain risk and serve as the primary technical contact for internal audit and risk teams.
What they look for
Requirements
Requires over 10 years of experience in software or platform engineering with at least 3 years in a leadership role. Must have hands-on experience with AI coding agents, CI/CD, Java, Python, and software supply chain security frameworks.
Benefits
Full description
Job Description
What is the opportunity?
RBC's DevOps team builds the controls that let thousands of engineers ship software into a regulated bank. As Director, DevOps Regulatory Engineering, you'll lead the engineering team that translates regulatory and security expectations into controls in the delivery pipeline, generates the audit evidence that proves those controls work, and manages risk across our software supply chain. You'll be the DevOps counterpart to Application Security and the point of contact for Technology Risk, Group Risk, Internal Audit and regulatory teams when they need to know how software gets built at RBC. This is an engineering leadership role, not a policy role: your team writes the code, and you use AI coding agents daily yourself.
What will you do?
Lead and grow the team
- Manage, coach and develop a team of engineers, with clear accountabilities and growth paths for each person
- Build a team culture where AI agents are part of everyday engineering, with the checks in place to trust what they produce
- Prioritize a mix of engineering delivery, risk requests and audit work against the team's capacity
Engineer pipeline controls and evidence
- Translate regulatory, risk and security requirements into automated controls in CI/CD and developer tooling
- Design the automated generation of audit evidence so controls prove themselves without manual collection
- Define requirements and evidence standards where other platform teams own the implementation, and verify what they build
Secure the software supply chain
- Own the roadmap for software supply chain risk: dependency and artifact management, SBOM generation, provenance and integrity, and vulnerability response in the pipeline
- Partner with Application Security on tooling, scanning coverage and remediation workflows
- Work with vendors when required to close gaps in supply chain tooling and services
Manage regulatory and audit engagement
- Lead responses to Internal Audit, Technology Risk and regulatory requests concerning the software development lifecycle
- Handle control exceptions and remediation plans, and track findings through to closure
- Maintain the mapping between regulatory expectations and the controls in place, and know where the gaps are
Apply AI to the work
- Use AI coding agents in building controls, evidence tooling and remediation automation, and set the standard for how the team uses them
- Assess the risk and control implications of AI-assisted development for the bank's SDLC
What do you need to succeed
Must Have
- Minimum 10+ years in software development or platform engineering, with 3+ years in director-level or equivalent leadership roles
- People management experience leading software or platform engineers, with a record of coaching and growing individuals
- Daily hands-on use of AI coding agents in your own work, and the ability to discuss in detail how you use them, where they fail and how you verify their output
- Strong engineering background in CI/CD, DevOps tooling and cloud platforms, with hands-on experience in Java and Python
- Some data engineering experience: building pipelines and working with data platforms such as Snowflake
- Experience with software supply chain security: dependency management, artifact repositories, SBOMs, signing and provenance, and vulnerability management
- Experience working with application security, technology risk or audit functions, including responding to audits and findings
- Ability to read a regulatory or risk requirement, turn it into a technical control, and explain the control back to a non-engineer
Nice to have
- Familiarity with OSFI B-13, NIST SSDF, SLSA, SOC 2 or similar frameworks
- Shipped an LLM-based capability into production
- Led AI adoption across an engineering team and measured its results
- Ability to reason about model cost and quality trade-offs when applying LLMs to controls or evidence work
- Experience managing vendor relationships for security or supply chain tooling
- Experience working in a large regulated organization, such as a bank
What’s in it for you?
We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.
- A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable
- Leaders who support your development through coaching and managing opportunities
- Ability to make a difference and lasting impact
- Work in a dynamic, collaborative, progressive, and high-performing team
- Flexible work/life balance options
#LI-post
#TECHPJ
Job Skills
Application Development, Application Maintenance, Applications Architecture, Commercial Acumen, Enterprise Application Delivery, Information Technology Management, Information Technology Trends, Programming Languages, System Applications
Additional Job Details
Address:
RBC WATERPARK PLACE, 88 QUEENS QUAY W:TORONTOCity:
TorontoCountry:
CanadaWork hours/week:
37.5Employment Type:
Full timePlatform:
TECHNOLOGY AND OPERATIONSJob Type:
RegularPay Type:
SalariedPosted Date:
2026-09-10Application Deadline:
2026-09-28Note: Applications will be accepted until 11:59 PM on the day prior to the application deadline date above
Our Employment Opportunities
At RBC, we are guided by living shared values of Client First, Integrity, Collaboration, Respect and Excellence and winning together as One RBC. We believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.
Join our Talent Community
Stay in-the-know about great career opportunities at RBC. Sign up and get customized info on our latest jobs, career tips and Recruitment events that matter to you.
Expand your limits and create a new future together at RBC. Find out how we use our passion and drive to enhance the well-being of our clients and communities at jobs.rbc.com.
RBC is presently inviting candidates to apply for this existing vacancy. Applying to this posting allows you to express your interest in this current career opportunity at RBC. Qualified applicants may be contacted to review their resume in more detail.
Similar roles
-
DevOps Engineer
Accenture Federal Services McLean, Virginia, United States · $130K–$265K/yr
-
Senior DevOps Engineer
P\S\L Group Malaysia
-
DevOps Engineer (Junior)
General Dynamics Information Technology Philadelphia, Pennsylvania, United States · $96K–$130K/yr
-
Senior DevOps Engineer
UnitedHealth Group Eden Prairie, Minnesota, United States · $92K–$164K/yr
-
Senior DevOps Engineer
McAfee Bengaluru, Karnataka, India
-
Sr. Engineer - Devops
Eaton Corporation Pune, Maharashtra, India