Senior Manager, Cyber Security and IT Risk

Scotiabank; Toronto; On-site; CAD 120,000 - 180,000; Full time

Benefits offered by this job

Performance bonus

Employee Share Ownership Program

Pension Plan Matching

Health Benefits from day one

Job summary

Scotiabank is seeking a Senior Manager in Cyber Security and IT Risk to partner across the Cyber & IT Risk team and senior stakeholders. The role drives regulatory, audit, remediation and risk priorities, ensuring timely delivery with high-quality outputs.

The successful candidate will manage regulatory responses, evidence, and management actions, while maintaining a strong second-line review and challenge as part of governance processes.

Qualifications

• 7+ years of relevant experience in Cyber Security, Technology Risk, IT Risk, audit or related disciplines.
• Broad knowledge across key Cyber and Technology Risk domains with ability to engage SMEs.
• Experience supporting regulatory examinations and internal audits.
• Ability to develop high-quality materials for executives, regulators and governance forums.

Responsibilities

• Coordinate and prepare Cyber & IT Risk responses and regulatory materials.
• Support audit engagements and track management actions.
• Review materials for second-line risk perspective and gaps.
• Drive remediation plans with clear milestones and owners.
• Provide timely reporting and escalation of issues requiring attention.
• Develop risk perspectives and recommendations for senior management.

Skills

Cyber Security

IT Risk

Regulatory awareness

Audit readiness

Issue remediation

Stakeholder management

Independent worker

Job description

Select how often (in days) to receive an alert:

Title: Senior Manager, Cyber Security and IT Risk

Requisition ID: 270013

Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.

The Senior Manager, Cyber Security & IT Risk is a key execution and risk management partner within the Cyber & IT Risk team. The role drives critical regulatory, audit, remediation and risk management priorities, helping ensure commitments are well managed, deliverables are high quality and work is completed on time.

The role requires strong Cyber and IT Risk knowledge combined with exceptional organization, judgment and execution. The Senior Manager will work across Cyber & IT Risk and with partners across the Bank to prepare regulatory and audit materials, manage issues and commitments, provide credible second-line review and challenge, and drive priority initiatives through to completion.

The successful candidate will be a proactive self-starter who can operate with a high degree of independence, bring structure to complex or ambiguous work, anticipate what is needed and identify issues before they become delivery risks.

Regulatory & Audit Readiness

• Coordinate and prepare Cyber & IT Risk responses, briefing materials, evidence and other deliverables for regulatory examinations and engagements.


• Work with subject matter experts and stakeholders to ensure regulatory materials are clear, accurate, complete, internally consistent and supported by appropriate evidence.


• Support Cyber & IT Risk engagement with Internal Audit, including responses to observations and management actions.


• Review regulatory and audit materials through a second-line risk lens and identify gaps, inconsistencies or areas requiring further analysis or challenge.


• Anticipate upcoming requirements and ensure Cyber & IT Risk is well prepared for regulatory and audit engagements.

Issues, Remediation & Commitments

• Drive disciplined management of Cyber & IT Risk-owned audit issues, regulatory commitments, remediation activities and other priority actions.


• Maintain clear visibility of milestones, owners, dependencies, evidence requirements and target dates.


• Proactively follow up on actions and identify potential delivery, quality or dependency risks before commitments are at risk.


• Review remediation plans and closure evidence to assess whether actions address the underlying risk and support the intended outcome.


• Provide clear reporting and timely escalation of issues requiring management attention or intervention.


• Provide credible second-line review and challenge across Cyber and Technology Risk matters, including regulatory responses, audit observations, remediation plans, risk assessments, policies and standards, and issue closure.


• Apply sound risk judgment to identify gaps, assumptions and areas requiring further analysis or challenge.


• Develop clear risk perspectives and recommendations to support senior management decision-making.


• Work constructively with first-line partners and subject matter experts to drive practical, risk-informed outcomes.


• Identify themes across issues, audit findings, regulatory matters and other risk information that may indicate broader or emerging concerns.

Strategic Execution

• Take ownership of complex or ambiguous assignments, establish a clear path forward and drive work through to completion with minimal direction.


• Anticipate upcoming priorities, deadlines, dependencies and decision points and proactively address them.


• Coordinate across teams to obtain required input, resolve dependencies and maintain momentum.


• Prepare clear, concise and executive-ready briefings, presentations, risk perspectives and decision materials.


• Identify opportunities to strengthen Cyber & IT Risk governance, reporting and ways of working.

Do you have the skills that will enable you to succeed? We’d love to work with you if you have:

• 7+ years of relevant experience in Cyber Security, Technology Risk, IT Risk, audit, regulatory or related disciplines, or equivalent demonstrated expertise.


• Broad or deep knowledge across key Cyber and Technology Risk domains, with the ability to understand technical issues, assess risk implications and engage effectively with subject matter experts.


• Experience supporting regulatory examinations, Internal Audit engagements, issue remediation or significant risk-management commitments.


• Demonstrated ability to develop high-quality materials for senior executives, regulators, auditors or governance forums.


• Strong understanding of first-line management, second-line risk oversight and Internal Audit responsibilities.


• Experience within a large, complex, regulated financial institution is preferred.


• Relevant professional qualifications such as CISSP, CISM, CRISC or CISA are considered an asset.


• Exceptional organization, attention to detail and follow-through.


• Strong bias toward action and demonstrated ability to work independently.


• Ability to bring structure to ambiguous or complex assignments.


• Ability to manage multiple priorities and deadlines without losing sight of quality.


• Strong analytical thinking, risk judgment and constructive challenge.


• Ability to simplify complex Cyber and IT matters for executives, regulators and non-technical audiences.


• Strong stakeholder management and ability to drive action without direct authority.


• Ability to anticipate requirements, identify potential problems and escalation appropriately.

What’s in it for you?

• An inclusive & collaborative working environment that encourages creativity, curiosity, and celebrates success!


• We offer a competitive rewards package: Performance bonus, Employee Share Ownership Program, and Pension Plan Matching, Health Benefits from day one!


• Your career matters! You will have access to career development and progression opportunities.

Location(s): Canada : Ontario : Toronto

Scotiabank is a leading bank in the Americas. Guided by our purpose: "for every future", we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.

At Scotiabank, we value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone. If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our Recruitment team know.