Senior Manager, Cyber & IT Risk, Global Risk Management

Scotiabank; Canada; On-site; CAD 100,000 - 130,000; Full time

Job summary

A leading financial institution in Canada seeks a Senior Manager for Cyber Security and IT Risk. This role involves assessing risk management practices, conducting quantitative analyses, and ensuring alignment with risk appetite levels. The candidate will oversee first-line practices and support regulatory reporting. The position offers a collaborative environment with competitive rewards and career development opportunities.

Benefits

Competitive rewards: bonuses, share programs, pension, health benefits

Career development opportunities

Qualifications

• 7-10 years of experience in IT Operations, Cyber Risk Management, or Audit.
• Ability to analyze complex data and influence enterprise risk programs.

Responsibilities

• Evaluate and oversee risk management practices for data integrity and confidentiality.
• Quantify cyber and IT risks in terms of probability and potential impact.
• Guide IT and Security functions on risk management processes.

Skills

Communication

Leadership

Data Analysis

Education

Professional Certifications (CRISC, CISA, CISSP, CISM)

Tools

Risk Management Tools

Job description

Requisition ID: #

Join a purpose-driven, high-performing team committed to results.

As the Senior Manager, Cyber Security and IT Risk, you will contribute to the development and execution of a second line of defense program for Cyber Security and IT Risk. Your role involves assessing risk management practices of the first line, conducting quantitative analysis of threats and vulnerabilities impacting IT systems and business processes across the Bank's channels, ensuring alignment with risk appetite levels.

You will support the success of the second line of defense within the Global Cyber Security and IT Risk Management Program, providing independent assessments and oversight of first-line practices. This role specifically supports the Tangerine portfolio.

Key Responsibilities:

1. Evaluate and oversee risk management practices to ensure systems operation, data integrity, and confidentiality.
2. Quantify cyber, IT, and related risks in terms of probability and potential impact.
3. Design scoring and quantification methodologies for risk appetite discussions.
4. Guide IT, Security, and control functions on risk management processes, policies, and standards.
5. Collaborate with internal and external partners for information sharing and risk oversight.
6. Participate in incident investigations, root cause analysis, and assess quantitative loss impacts.
7. Monitor IT Risk Profile, KRIs, and Risk Metrics, reporting on vulnerabilities and emerging risks.
8. Analyze risk trends and evaluate risk response effectiveness.
9. Support regulatory reporting related to IT Risks.

Qualifications:

• 7-10 years of experience in IT Operations, SDLC, Cyber Risk Management, Governance, or Audit. Cybersecurity expertise is a plus.
• Strong communication, interpersonal, and leadership skills.
• Ability to analyze complex data and influence enterprise risk programs.
• Experience with IT Operations areas and risk management tools.
• Knowledge of industry frameworks like COBIT, ITIL; professional certifications (CRISC, CISA, CISSP, CISM) are assets.

What We Offer:

• An inclusive, collaborative environment fostering creativity and success.
• Competitive rewards: bonuses, share programs, pension, health benefits.
• Career development opportunities.

Location:

Canada, Ontario, Toronto

Scotiabank is committed to diversity and inclusion. Accommodations are available upon request during the recruitment process.