Tech Risk & RCSA Manager: Drive Controls & Compliance

Scotiabank; Dallas (TX); On-site; USD 110,000 - 160,000; Full time

Job summary

Scotiabank in Dallas is seeking a Manager, Technology Risk & Control Self-Assessment to lead coordination of the RCSA program for technology domains, ensuring risk identification and control effectiveness across systems and services.

You will collaborate with First, Second, and Third Line teams to gather evidence, document findings, and elevate material issues, while supporting governance forums and continuous improvement of RCSA tools and procedures.

Qualifications

• Hands-on experience executing risk assessments or governance processes.
• 5–8+ years in Technology Risk, Operational Risk, IT Audit, or RCSA.
• Bachelor’s degree in Information Systems, Computer Science, Risk Management, or related field.

Responsibilities

• Support end-to-end execution of Technology RCSAs across assigned systems, platforms, and services.
• Coordinate risk identification sessions, inherent risk scoring, control mapping, and residual risk assessments.
• Gather, analyze, and document risk and control information in accordance with approved RCSA methodology.
• Assess control design and operating effectiveness across key technology domains (e.g., access management, change management, resiliency, third-party risk).
• Identify control gaps, emerging risks, and required remediation actions and elevate material issues as appropriate.
• Support validation of assessment outcomes with First Line stakeholders. Stakeholder Coordination
• Partner with First Line Technology teams to collect required data and supporting evidence.
• Coordinate with Second and Third Line teams to support review and challenge processes.
• Maintain accurate documentation, issue logs, and remediation tracking for assigned RCSAs.
• Contribute to RCSA status updates, findings, and emerging risk themes.
• Assist in preparing summaries and materials for senior management and governance forums.
• Support continuous improvement of RCSA tools, templates, and procedures.
• Apply quality standards and elevate risks, issues, or execution challenges as appropriate.

Skills

Risk assessments

Technology risk

RCSA

Regulatory knowledge

CISSP

OSFI/FFIEC/NYDFS knowledge

NIST/COBIT knowledge

Education

Bachelor’s degree in Information Systems, Computer Science, Risk Management

Job description

Scotiabank in Dallas is seeking a Manager, Technology Risk & Control Self-Assessment to lead coordination of the RCSA program for technology domains, ensuring risk identification and control effectiveness across systems and services.

You will collaborate with First, Second, and Third Line teams to gather evidence, document findings, and elevate material issues, while supporting governance forums and continuous improvement of RCSA tools and procedures.