Director & Head, Identity & Access Management

Scotiabank • Toronto, ON

52d • Onsite

About The Position

Leads and oversees Enterprise Identity and Access Management globally ensuring business strategies, plans and initiatives are executed / delivered in compliance with governing regulations, internal policies and procedures. In this role, the individual will lead and oversee the Enterprise Identity Access function within the Enterprise Security Identity Access Management department. This includes leading the operation and engineering of established security controls pertaining to identity and access, such as centralized access certification of user identities, user accounts linked to those identities, management of privileged access, and the integration and operations of identity management tools. The role also drives a multi-year EIAM strategy and roadmap for both human and non-human identities, aligned with Enterprise Security strategy and standards, and manages programs and projects to achieve systematic IAM improvements. The Director will build and influence direction with key partners across Enterprise Security, technology, operations, business (e.g., HR), and other partners to support the Enterprise IAM roadmap and changes to IAM standards, controls, and solutions. They will also contribute to the broader IAM and Enterprise Security strategy and roadmap, understand the Bank’s risk appetite and culture, and build a high-performance team by implementing a people strategy that attracts, retains, develops, and motivates the team through an inclusive work environment, clear communication of vision/values/business strategy, and succession/development planning. The role directs day-to-day activities consistent with the Bank’s risk culture and appetite, ensuring effective and efficient operations in accordance with Scotiabank’s Values, Code of Conduct, and Global Sales Principles, while maintaining adequate day-to-day business controls for operational, compliance, AML/ATF/sanctions, and conduct risks.

Requirements

• Bachelor’s or Master’s Degree in Computer Science, Information Systems, or other related field, OR equivalent work experience.
• Knowledge and understanding of Identity and Access Management specific laws, rules, regulations, and Guidelines such as SOX, OCC, NIST, ISO/EC, FFIEC within the financial services sector.

Nice To Haves

• Security certification(s) (CISSP, CISM, CCSP, CRISC etc.) would be an asset(s).

Responsibilities

• Leads and oversees the Enterprise Identity Access function within Enterprise Security Identity Access Management department.
• Leads the operation and engineering of established security controls pertaining to identity and access. This includes centralized access certification of user identities, the user accounts linked to those identities, management of privileged access, as well as the integration and operations of identity management tools supporting these domains.
• Drives a multi-year EIAM strategy and roadmap which includes staff human identities and non-human identities in alignment with Enterprise Security strategy and standards.
• Manages programs and projects against roadmap to drive systematic IAM improvements across the Bank.
• Builds and influences direction with key partners across Enterprise Security, technology, operations, business (e.g. HR) and partners in support of Enterprise IAM roadmap and changes to IAM standards, controls & solutions.
• Contribute to our broader IAM and Enterprise Security strategy and roadmap.
• Understand how the Bank’s risk appetite and risk culture should be considered in day-to-day activities and decisions.
• Builds a high-performance environment and implements a people strategy that attracts, retains, develops and motivates their team by fostering an inclusive work environment, communicating vison/values/business strategy and managing succession and development planning for the team
• Directs day-to-day activities in a manner consistent with the Bank’s risk culture and the relevant risk appetite statement and limits. Communicates the Bank’s risk culture and risk appetite statement throughout their teams.
• Creates an environment in which their team pursues effective and efficient operations of their respective areas in accordance with Scotiabank’s Values, its Code of Conduct and the Global Sales Principles, while ensuring the adequacy, adherence to and effectiveness of day-to-day business controls to meet obligations with respect to operational, compliance, AML/ATF/sanctions and conduct risk.
• Builds a high-performance environment and implements a people strategy that attracts, retains, develops and motivates their team by fostering an inclusive work environment and using a coaching mindset and behaviours; communicating vison/values/business strategy; and, managing succession and development planning for the team

Benefits

• Upskilling through online courses, cross-functional development opportunities, and tuition assistance.
• Competitive Rewards program including bonus, flexible vacation, personal, sick days and benefits will start on day one.
• Community Engagement - no matter where you choose to work from; we offer opportunities for community engagement & belonging with our various programs such as hackathons, contests, Humans of Digital and much more

What This Job Offers

• Job Type: Full-time
• Career Level: Director