Manager, US Information Security & Control

Manager, US Information Security & Control

Requisition : 260679

Salary Range: -

Please note that the Salary Range shown is a guideline only. Salary offered may vary based on factors, including, but not limited to, the successful candidate’s relevant knowledge, skills, and experience.

The Information Security Manager plays a key role in the U.S. Cybersecurity Program, helping drive oversight, coordination, and execution across a broad range of cybersecurity priorities that protect the Bank and support business growth.

This role offers an exciting opportunity to help shape cybersecurity strategy and governance across the U.S. organization while partnering closely with global teams. You will contribute to strengthening the Bank’s security posture, enhancing risk visibility, and influencing how critical security decisions are made in a dynamic, highly collaborative environment.

This role is ideal for a cybersecurity professional who is curious, proactive, and eager to expand their impact across multiple security domains. It offers strong exposure to governance, risk, control, and advisory activities, along with meaningful opportunities to build relationships, take ownership, and grow within a leading global financial institution.

In this role, you will partner closely with Technology, Risk, Compliance, and business stakeholders to support risk‑informed decision‑making, strengthen cybersecurity practices, and help ensure alignment with Bank standards and regulatory expectations. Your work will contribute directly to protecting the organization from evolving threats while advancing a resilient and well‑governed cybersecurity program.

• Support the execution of cybersecurity governance, risk, and control activities across the U.S. organization.
• Assess, communicate, and help prioritize cybersecurity risks, issues, and emerging concerns for key stakeholders.
• Coordinate and track cybersecurity initiatives, assessments, issues, and action plans to support strong program execution and accountability.
• Prepare and deliver clear, meaningful cybersecurity reporting and insights for operational, management, and executive audiences.
• Develop risk‑based recommendations and provide thoughtful cybersecurity insights to inform decision‑making and strategy.
• Contribute to the continuous improvement of cybersecurity processes, governance practices, and key risk and performance indicators.
• Partner with Technology, Risk, Compliance, and business teams to help ensure cybersecurity activities align with internal standards and applicable regulatory expectations.

Actively pursues effective and efficient operations of his/her respective areas in accordance with Scotiabank’s Values, its Code of Conduct, and the Global Sales Principles, while ensuring the adequacy, adherence to and effectiveness of day‑to‑day business controls to meet obligations with respect to operational, compliance, AML/ATF/sanctions and conduct risk.

Champions a high‑performance environment and contributes to an inclusive work environment.

• ~5 years of experience in IT, cybersecurity, risk management, or related fields
• Experience supporting cybersecurity, risk management, security governance, or control activities within complex organizations.
• Experience working in regulated environments
• Exposure to cybersecurity frameworks, standards, and best practices such as NIST, CIS, or ISO.
• Ability to take ownership of initiatives and follow through on commitments.
• Strong analytical and problem‑solving abilities, with ability to interpret technical information and translate it into actionable insights
• Attention to detail and commitment to high standards.
• Effective verbal and written communication skills are required.
• Strong proficiency in Microsoft Office Suite, with the ability to actively leverage Copilot and other productivity tools to enhance work quality, streamline tasks, and accelerate delivery.
• Curiosity and willingness to learn in a fast‑changing security landscape.
• Universitydegreein Computer Science, Information Security, Engineering, Business Technology Management, or a related field or equivalent practical experience
• Cybersecurity related…