Senior Director, Technology Risk Officer

Scotiabank; Toronto; On-site; CAD 180,000 - 260,000; Full time

Job summary

Scotiabank seeks a Senior Director, Technology Risk Officer to lead the 1B Technology Risk and Internal Controls function across the enterprise. The role requires shaping risk management and governance practices, ensuring alignment with regulatory expectations and business strategy.

The successful candidate will oversee risk identification, escalation, and remediation while partnering with Technology, Product, and Business teams to strengthen controls and resilience in a rapidly evolving cyber

Qualifications

• Strong leadership and communication at executive level.
• Expertise in technology risk, cybersecurity, and internal controls.
• Proven ability to drive risk remediation in complex environments.

Responsibilities

• Lead Technology Risk Management and Internal Controls across the First Line of Defense.
• Provide direction to risk owners to identify, assess, mitigate, and monitor technology and cyber risks.
• Partner with technology, product, and business teams to manage risk governance and reporting.
• Monitor risk indicators and drive remediation to meet governance expectations.
• Develop and communicate risk insights to senior leadership and governance bodies.

Skills

Leadership

Cybersecurity

Risk management

Regulatory awareness

Communication

Strategic planning

Education

Bachelor's degree in a relevant field

Job description

Select how often (in days) to receive an alert:

Select how often (in days) to receive an alert:

Please be advised that our Careers site will be unavailable from November 28 at 12am ET to November 29 12am ET for scheduled system maintenance.

Title: Senior Director, Technology Risk Officer

Requisition ID: 259458

Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.

The role:

The Senior Director, Technology Risk Officer (TRO) leads the First Line of Defense (1B) Technology Risk and Internal Control function, accountable for the design, implementation, operation, and continuous improvement of technology and cybersecurity risk management practices across the enterprise. The role ensures technology and cybersecurity risks are identified, assessed, mitigated, monitored, and reported in alignment with the firm’s risk appetite, regulatory expectations, and business strategy.

This role requires a visionary leader with a deep understanding of cybersecurity principles, risk management, and compliance frameworks. The ideal candidate will possess strong communication and leadership skills, the ability to navigate complex regulatory landscapes, and a commitment to continuous improvement in the face of a rapidly evolving cybersecurity environment.

What will you do?

• Own execution and accountability for Technology Risk Management and Internal Controls within the First Line of Defense (1B).
• Provide direction and oversight to Technology 1A risk owners to strengthen their capability to identify, assess, mitigate, and monitor technology and cyber risks.
• Serve as a trusted 1B Technology Risk partner to Technology, Product, and Business teams.
• Lead the identification, escalation, monitoring, and measurement of technology and operational risks in alignment with firm-wide risk management programs.
• Serve as a deep subject matter expert and trusted Technology 1B partner on cybersecurity, resiliency and physical security principles, practices and technologies across key domains, including, Threat and Vulnerability Management, Data Protection, Identity and Access Management, Cyber Incident Response, Cyber Threat Intelligence, Technology Resilience, Third Party Cyber Risk, Physical Security and Application Security.
• Monitor technology risk KRIs and KPIs, supports review and challenge of remediation and get-to-green plans, and tracks delivery of sustainable risk reduction.
• Ensures technology risk outcomesremainaligned to the firm’s risk appetite and governance expectations.
• Prepare and presents technology risk insights, trends, and recommendations to senior management and governance forums.
• Provide 1B risk and control advisory support, including targeted risk reviews, root cause analysis, and development of sustainable mitigation strategies.
• Implements the firm’s technology risk management strategy, ensuring alignment with regulatory and industry standards.
• Drives a proactive risk and control culture focused on prevention, transparency, and continuous improvement.
• Partner with Second Line of Defense to support effective review, challenge, and enterprise consistency.
• Collabor