Senior Director, Technology Risk & Assessment Strategy

Scotiabank; Toronto; On-site; CAD 230,000 - 290,000; Full time

Job summary

Scotiabank is seeking a transformational Senior Director to modernize how technology and cybersecurity risks are assessed across the Bank. You will lead a global, first-line assessment capability, integrating Threat Risk Assessments and Vendor Security Review under a single leadership model.

You will drive shift-left security, establish reusable patterns, and define risk-based workflows with AI and automation to deliver evidence-informed decisions at enterprise scale.

Qualifications

• 10+ years of progressive experience in technology risk, cybersecurity or risk assessment, including senior leadership roles.
• Experience leading enterprise GRC transformation, including ServiceNow IRM or similar platforms.
• Strong understanding of risk assessment methodologies, threat modelling and evidence-based decision making.

Responsibilities

• Lead the TRA and VSR capabilities under one senior leadership model, aligning methods and risk language.
• Define and maintain consistent assessment methodology, criteria and taxonomies across teams.
• Embed risk assessment early in architecture and delivery, including CI/CD pipelines and cloud risk considerations.
• Oversee the modernization of assessment workflows, data handling and automation.
• Provide clear risk insights to technology leaders and governance forums and interact with regulators as needed.
• Build and lead a large, distributed team across multiple geographies with a focus on talent development and performance.

Skills

Technology risk

Cybersecurity

Risk assessment

Leadership

GRC

Education

Bachelor's degree in Computer Science or related field

Tools

ServiceNow IRM

CI/CD

Job description

Scotiabank is seeking a transformational Senior Director to modernize how technology and cybersecurity risks are assessed across the Bank. You will lead a global, first-line assessment capability, integrating Threat Risk Assessments and Vendor Security Review under a single leadership model.

You will drive shift-left security, establish reusable patterns, and define risk-based workflows with AI and automation to deliver evidence-informed decisions at enterprise scale.