Senior Manager, IT Risk

About the role

Second-line Cyber & IT Risk Management role at Scotiabank Global Risk Management, Toronto: lead 2LoD challenge, RCSA program management, IT risk/control assessment, issue management and reporting. 5+ years technology/operational risk, IT audit or compliance; 1+ years RCSA; CISSP/CRISC/CISM desirable; OSFI, FFIEC, NYDFS 500, NIST, COBIT knowledge preferred. Spanish proficiency is required. No statement on visa sponsorship.

Requirements

• Strong expertise in IT Risk Management (logical access, data leakage, disaster recovery)
• 5+ years in Technology or Operational Risk Management, IT Audit, IT Compliance, regulatory supervision, consulting or advisory
• 1+ years of RCSA experience in 1LoD or 2LoD
• Certifications desirable (CISSP, CRISC, CISM)
• Knowledge of OSFI, FFIEC, NYDFS 500 and NIST, COBIT preferred
• Experience with GRC risk management tools
• Advanced data analytics and data literacy
• Spanish proficiency is required
• Master's degree in science, technology, engineering or business an asset

What you'll do

• Lead 2nd line challenge of cyber and IT risks
• Manage the RCSA program annual plan and resourcing
• Review and challenge inherent/residual risk and control effectiveness assessments
• Ensure IT risk issues and action plans are documented and tracked
• Report on IT RCSA findings and risk trends
• Deliver training on IT RCSA processes
• Liaise between business units, control owners and IT Risk

Where this was posted

• Indeed

  last seen 47m ago
  View on Indeed