US Cyber & IT Risk Management Lead

Scotiabank; Dallas (TX); On-site; USD 140,000 - 180,000; Full time

Job summary

Scotiabank seeks a Senior Manager for U.S. Cyber and IT Risk Management to lead the governance, oversight, and reporting of IT risks across U.S. entities.

You will collaborate with business lines, challenge first-line controls, and drive improved risk practices in a complex banking environment. The role requires deep knowledge of IT risk, regulatory expectations (FFIEC, NYDFS), and strong communication across leadership levels.

Qualifications

• Strong understanding of IT risk management frameworks in a global banking environment.
• Ability to convey complex concepts and interpret risk with stakeholders.
• Independent in judgment with high standards of conduct and ethics.

Responsibilities

• Maintain the U.S. Cyber and IT Risk Management Framework and best practices.
• Advise lines of business on IT risks affecting objectives.
• Challenge RCSA components for U.S. entities and processes.
• Investigate IT incidents to identify root causes and remediation actions.
• Perform deep dives to assess controls and identify remediation gaps.
• Monitor cybersecurity risks and external threat reporting.
• Prepare IT risk reporting for committees and senior management.

Skills

IT risk management

Independent judgment

Negotiation skills

Analytical thinking

English communication

Interpersonal skills

Regulatory knowledge

Experience in tech risk

Education

Bachelor's degree in IT or related field

Tools

NIST, COBIT frameworks

Job description

Scotiabank seeks a Senior Manager for U.S. Cyber and IT Risk Management to lead the governance, oversight, and reporting of IT risks across U.S. entities.

You will collaborate with business lines, challenge first-line controls, and drive improved risk practices in a complex banking environment. The role requires deep knowledge of IT risk, regulatory expectations (FFIEC, NYDFS), and strong communication across leadership levels.