IT Risk Manager

Select how often (in days) to receive an alert:

Requisition :

Join a purpose driven winning team, committed to results, in an inclusive and high‑performing culture.

Contributes to the overall success of the IT Risk team (1B role) ensuring specific individual goals, plans, initiatives are executed / delivered in support of the team’s business strategies and objectives. Ensures all activities conducted are in compliance with governing regulations, internal policies and procedures.

• Advises and supports risk owners in day to day risk management activities and execution
• Acts as a primary interface and conduit between the risk owners and other risk groups to lead the facilitation and execution of risk management activities
• Identifies, assesses, prioritizes and reports on material IT risks for IT and aligned business areas. This will require working with equivalent risk advisors in various business areas
• Assists risk owners in adhering to policies, frameworks, standards and guidelines through active engagement, guidance and counselling
• Monitors and tracks issues raised by Internal Audit and Regulators, assists issue owners to ensure remediation is completed within pre‑defined timelines and risk is addressed appropriately
• Responds to requests for information technology assessments and questionnaires, providing information technology related responses within required time
• Ensures that IT Risk assessments and outputs are recorded in enterprise tools and in full compliance with all policies and common standards, including the IT Risk Management Policy and Framework
• Partners with other risk groups to assess, implement and communicate new/updated risk controls, frameworks, policies, risk indicators, metrics, and limits
• Monitors IT risk KPIs and KRIs within established tolerance, providing escalation to ensure timely remediation
• Identifies pervasive IT risk issues or issues that are common across the landscape
• Performs various types of data analysis work and prepares monthly / quarterly reporting for senior management
• Ensures implementation of a strong IT risk culture in partnership with the risk owners

• Champions a customer focused culture to deepen client relationships and leverage broader Bank relationships, systems and knowledge
• Understands how the Bank’s risk appetite and risk culture should be considered in day‑to‑day activities and decisions
• Creates an environment to pursue effective and efficient operations of his/her respective areas in accordance with Scotiabank’s Values, its Code of Conduct and the Global Sales Principles, while ensuring the adequacy, adherence to and effectiveness of day‑to‑day business controls to meet obligations with respect to operational, compliance, AML/ATF/sanctions and conduct risk

• Breadth of IT and Risk management experience (governance, operations, audit, control functions, compliance, risk management) over 5+ years with at least 2 years’ in management (3+ preferred)
• Familiarity with industry frameworks, and Financial Banking Regulations (NIST CSF, FFIEC IT Handbooks, OSFI B-13, CSA CCM, TOGAF, Archi Mate)
• Technically strong and can easily engage with Security, Engineering and Architecture teams to assess risks
• Strong ability to leverage collaboration through successful use of tools such as Microsoft Teams, JIRA and Service Now to manage collaborative workflow
• Good communication (both verbal and written), facilitation and presentation skills. The ability to communicate confidently and clearly on conference calls, in meetings, via email, etc. at all levels of the organization is essential
• Performance and results oriented skills
• Strong organizational skills and the ability to effectively manage multiple tasks simultaneously
• Capability of working in a complex and fast paced environment

• MBA, Degree in Computer Science, Engineering, or equivalent experience
• CISA, CRISC, CGEIT, CISM is a plus
• Exposure to cloud controls would be an asset
• Experience managing initiatives within risk appetites and established KPIs or KRIs and creativity in issue resolution or management