Senior Manager, IT Risk

Requisition

Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.

Scotiabank has embarked on the journey to modernize the Bank. Enterprise Architecture is a key pillar on driving this change. The aim of this role is to understand the IT Risk Management and Governance of Enterprise Architecture and Resiliency and guide teams across the Bank to manage these types of risk(s). We are looking to build our IT Risk team with influencers, makers, innovators, and industry leaders who will drive us forward with smart and effective risk management that is aligned with a growth mindset.

The role of Senior Manager, IT Risk – Enterprise Architecture & Resiliency will lead and engage on the management of IT Risk(s) across Scotiabank and its subsidiaries

Is this role right for you? In this role you will:

• 7 to 10+ years of risk management and/or technology experience with at least five years of managing a large cross-functional team and influencing senior level management and key stakeholders
• Excellent relationship management, influencing, negotiating, and interpersonal skills. Ability to work effectively with all levels of the organization and balance the needs of multiple functions
• High level experience with modern technologies such as public and private cloud (AWS, Azure, etc.), microservice architecture, overall approaches to developing target operating models and a deep understanding of how technologies integrate and interact with broader systems.
• Understands the foundation of the RCSA process and the identification of risks and controls.
• Leads and ensures proper development of the New Initiative Risk Assessments with various stakeholders
• Previous experience developing and executing on strategies and delivering superior results in both the short and long term
• Previous experience as a Security Architect, Infrastructure Architect and overall understanding of Enterprise Architecture in Technology ideally within a regulated financial services environment
• Analyze IT processes to design and implement robust risk related controls and processes and ensure that controls are maintained and monitored.
• Actively monitor and investigate Cloud’s Key IT Risk Indicators (Security, Availability, Third Party Management, Software Currency, etc.), and work across the organization to resolve vulnerabilities.
• Interface with other areas in Scotiabank, such as:
  Cybersecurity, Vulnerability Management, Global Risk Management, Audit, Compliance, Portfolio Management.
• Ensure that IT Risk assessment analysis and results are maintained in enterprise tools and are in full compliance of defined policies and common standards.
• Track, monitor and work with issue owners to ensure that open issues related to TRAs, IT RCSAs, Audits, Compliance reviews, any self-identified issues and any other relevant risk reviews
• Requires a strong understanding of 1st Line, 2nd Line and 3rd Line Risk Management practices
• Work with Scotiabank’s Audit and Compliance teams to resolve any issues identified by those teams.
• Understand how the Bank’s risk appetite and risk culture should be considered in day-to-day activities and decisions.
• Actively pursues effective and efficient operations of his/her respective areas in accordance with Scotiabank’s Values, its Code of Conduct and the Global Sales Principles, while ensuring the adequacy, adherence to and effectiveness of day-to-day business controls to meet obligations with respect to operational, compliance, AML/ATF/sanctions and conduct risk.
• Champions a high-performance environment and contributes to an inclusive work environment.
• Deliver projects to remediate IT Risk, Internal Audit and Regulatory (including OSFI) associated with security platforms.
• This position also requires strong people management skills and the ability to motivate and influence junior staff and SMEs in the Bank and other Technology departments.

Do you have the skills that will enable you to succeed in this role? We'd love to work with you if you have:

• CCSP, CISSP, CISA or similar certifications (Required)
• Familiarity with industry frameworks, and Financial Banking Regulations (NIST CSF, FFIEC IT Handbooks,…