Job Description
What is the opportunity?Reporting to the Director, Application Security, you will be responsible for overseeing the execution, compliance, and continuous improvement of RBC’s enterprise-wide penetration testing program. You would ensure penetration tests are completed on schedule, manage vendor relationships, maintain regulatory compliance, and drive operational efficiency. You would also act as a critical liaison between external vendors, asset owners, risk teams, and senior leadership, while proactively addressing risks, escalations, and program evolution to align with industry standards and organizational growth.What will you do:Program Oversight: Manage the end-to-end execution of 250+ annual penetration tests, ensuring compliance with deadlines and regulatory requirements, while overseeing vendor performance and scoping.
Stakeholder Reporting & Communication: Deliver bi-weekly status reports to senior management, highlighting program health, risks, and initiatives.
Process & Control Management: Define, document, and maintain program processes, control frameworks, and evidence for audits, ensuring alignment with internal and external standards.
Continuous Improvement: Drive program transformation to enhance efficiency, coverage, cost-effectiveness, and stakeholder experience, including integration of new subsidiaries.
Risk & Relationship Management: Address escalations, proactively mitigate risks, and foster collaboration with vendors, asset owners, and risk/governance teams.
Cyber Security Program Management: 5+ years of experience in security testing, vulnerability management, or cybersecurity program management.
Penetration testing: Experience in planning, executing, and overseeing penetration testing for internet-facing and internal applications.
Regulatory & Control Frameworks: Expertise in maintaining compliance with regulatory requirements (e.g., NIST, ISO 27001) and managing control documentation/testing.
Stakeholder & Vendor Management: Demonstrated ability to build relationships, manage escalations, and hold vendors accountable for deliverables.
Process Documentation & Metrics: Strong skills in creating/maintaining process documentation and defining KPIs to measure program effectiveness.
Risk Management & Reporting: Experience identifying, mitigating, and communicating risks to senior leadership, with a track record of driving operational improvements.
Certifications in information security (e.g., CISSP, CCSP, CRISC, CIAM, ITIL)
Previous work experience within the financial sector or other large enterprise industry.
General knowledge of penetration testing methodologies, tools, and techniques, including web application penetration testing, mobile penetration testing and network penetration testing.
Experience with agile methodologies and tools, such as Jira, for backlog management and sprint planning.
PMP certification.
A comprehensive Total Rewards Program including bonuses, flexible benefits and competitive compensation.
Leaders who support your development through coaching and managing opportunities.
Opportunities to work with the best in the field.
Ability to make a difference and lasting impact.
Work in a dynamic, collaborative, progressive, and high-performing team.
A world-class training program in financial services.
Address:
16 YORK ST:TORONTOCity:
TorontoCountry:
CanadaWork hours/week:
37.5Employment Type:
Full timePlatform:
TECHNOLOGY AND OPERATIONSJob Type:
RegularPay Type:
SalariedPosted Date:
2026-07-27Application Deadline:
2026-08-31Note: Applications will be accepted until 11:59 PM on the day prior to the application deadline date aboveOur Employment OpportunitiesAt RBC, we are guided by living shared values of Client First, Integrity, Collaboration, Respect and Excellence and winning together as One RBC. We believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.Join our Talent Community
Stay in-the-know about great career opportunities at RBC. Sign up and get customized info on our latest jobs, career tips and Recruitment events that matter to you.
Expand your limits and create a new future together at RBC. Find out how we use our passion and drive to enhance the well-being of our clients and communities at jobs.rbc.com.
Penetration Testing Program Manager (Global Security) • TORONTO, Ontario, Canada
Advance your career with Scotiabank in Toronto as a Penetration Testing Service Specialist.Collaborate with development teams to fortify security protocols and manage vulnerability assessments.This... Show more
Advance your cybersecurity career with NetSPI as a Penetration Testing Expert.Engage in web application assessments and deliver critical security insights for clients.This Senior Security Consultan... Show more
Are you ready to power the World's connections?.If you don’t think you meet all of the criteria below but are still interested in the job, please apply.Nobody checks every box - we’re looking for c... Show more
Manages physical security technologies and programs, overseeing access control, video surveillance, and intrusion detection systems to protect people, facilities, and assets. Show more
Senior Manager, Control Testing Reporting and Operations.This strategic role bridges testing execution with data‑driven insights and process.You will orchestrate the team's testing activities while... Show more
We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their ful... Show more
Maintain up-to-date knowledge of applicable regulatory requirements (e.FINTRAC, OSFI, FCAC, CDIC, OPC) and support the implementation and ongoing enhancement of the Bank’s Regulatory Compliance Man... Show more
Duration 15 months assignment (contract).Client Location Toronto (Hybrid: 7.AM and 5:00 PM, Monday to Friday).Engagement Model Professional Services Engagement – B2B (Incorporated Entities Only).As... Show more
Drives planning and execution of critical security programs and projects across a global portfolio of dating brands, partnering with various security and engineering teams.Translates strategic obje... Show more
RQ08437 - Security Specialist - Penetration Testing - Senior.Conducts penetration tests, web application vulnerability assessments, code reviews and network vulnerability assessments of all environ... Show more
We are currently looking for team members to join our Security, Privacy, and Risk Consulting practice.The candidate will work with teams of security and privacy staff in a wide variety of systems e... Show more
A leading technology solutions provider is looking for a UAT Testing Manager in Toronto to lead User Acceptance Testing activities for the Empower Loan Origination System.This role involves managin... Show more
Our mission is to scale intelligence to serve humanity.We’re training and deploying frontier models for developers and enterprises who are building AI systems to power magical experiences like cont... Show more
Ce poste de gestionnaire de la conformité supervise la planification et l'exécution des programmes de surveillance et de tests pour TD Securities au Canada.Il implique la gestion d'une équi... Show more
Join our Global Technology Governance & Control team! We are the first line of defence in our organization, focused on managing and mitigating risk.We partner with leadership to develop risk cultur... Show more
Guidewire is looking for a Technical Program Manager within its Security organization to lead execution of critical security programs aligned with Guidewire’s security maturity strategy.This role w... Show more
We are seeking a Technical Program Manager to lead co‑engineering programs between AMD, Microsoft, and OEM partners, enabling Windows Security features across AMD platforms.This role requires stron... Show more
Become a Senior Project Manager with Insight Global in Toronto, overseeing ATM security upgrades.This mid-senior contract role emphasizes encrypted PIN pad integration for PCI compliance.Your respo... Show more
){kind=logo}
