Director, Portfolio Management (Cloud)

Scotiabank • Toronto, ON

1d • Onsite

About The Position

The Director of Cloud and Application Security Engineering leads the strategic delivery and operational support of the bank’s cloud security and application security platforms, ensuring alignment with long-term business objectives, regulatory mandates, and enterprise architecture standards. This role is accountable for championing engineering best practices that drive innovation, resilience, and scalability across the organisation’s cloud and application security ecosystem. In this role, the Director will empower a cross-functional technology team to deliver cutting edge cloud and application security solutions, guiding them in the execution and delivery of the enterprise Cloud and Application Security product strategy. This involves setting clear objectives, providing mentorship, and ensuring that platform engineering initiatives align with the broader strategic goals of the organization. The Director facilitates collaboration across different departments with the aim of making strategic platform engineering decisions. This cross-functional approach ensures that security solutions are embedded into the bank’s development and operational workflows. Outstanding verbal and written communication skills are essential for this role. The Director must be able to distill and convey complex technical information to executive management, including details related to risks, resource utilization, and the impact on project roadmaps. Effective communication ensures alignment among stakeholders and supports informed decision-making. It is imperative that all activities undertaken in this role comply with applicable governing regulations, as well as internal policies and procedures. The Senior Manager is responsible for ensuring that the team’s work adheres to these standards, thereby supporting the bank’s commitment to operational integrity and regulatory compliance.

Requirements

• 5+ years’ experience in a leadership role managing large complex technology projects with significant technology and operational components
• Minimum 10 years of IT and business/industry work experience
• 7+ years of hands-on experience in Product Engineering and Solution design
• 3+ years of running and delivering projects more than $5M annually.
• Champion all development/engineering work effort within the Application Security and Cloud Security domains.
• Provide remediation governance, ensuring critical product vulnerabilities are addressed within defined SLAs.
• Deep understanding of compliance frameworks and regulatory requirements.
• Familiarity with cloud security posture management and workload protection platforms.
• Strong background in software engineering or DevSecOps.
• Excellent verbal and written communication, negotiating and interpersonal skills with the ability to summarize material for executives.
• Performed budgeting, estimations, and resource planning.
• Excellent people management, coaching and leadership skills and experience.
• Good understanding of Security and IT service delivery and a solid understanding of mapping stakeholder requirements to results.
• Experience with and knowledge of project methodologies such as Waterfall, Agile and DevOps in delivering large scale solutions in an enterprise environment.
• Broad understanding of Information Security and Technology domains with focus on the Financial Industry will be an asset.
• Experience leading a team responsible for cloud development technologies and tools such as Containers, VMs and Micro services with proven experience with a cloud provider (Google Cloud, Microsoft Azure).
• Experience working with Internal Audit and Regulatory Assessments (e.g., SOX, OSFI, CDIC, etc.) and addressing compliance gaps.
• Experience collaborating with various Scotiabank engineering teams such as (but not limited too) Scotia Digital, GTS, IPM and IS&C to foster a common goal and solve complex problems.
• Undergraduate Degree in Computer Science, Diploma or technical equivalent experience is required.

Nice To Haves

• Preferred deep understanding of Banking (preferred Scotiabank) process, procedures and cross-functional engagement.
• Nice to have (but not required) one or more: CISSP, CCSK or ITIL.
• Nice to have (but not required) fluency in Spanish

Responsibilities

• Design, implement and integrate enterprise security platforms for the bank’s on-prem and Cloud environments.
• Manage resource allocation, estimation for new initiatives, assessment of incoming work, development and maintenance of a roadmap for the team.
• Deliver projects to remediate IT Risk, Internal Audit and Regulatory (including OSFI) associated with security platforms.
• Lead and mentor a team of engineers providing guidance, mentorship, and support.
• Mentor and facilitate the team’s platform implementation and project deliverables, including communicating clearly to stakeholders, define critical chain of events to execute a project successfully, identify risks and collaborate across functions to remove roadblocks.
• Work closely with other department directors to facilitate cross-department strategic decisions and work with leaders in defining and building executive communication.
• Closely collaborate with Product, Architecture and operations teams to ensure alignment and effective implementation of the bank’s enterprise security strategy.
• Build and maintain stakeholder buy-in and relationships across Security and IT business line teams.
• Understand how the Bank’s risk appetite and risk culture should be considered in day-to-day activities and decisions.
• Actively pursue effective and efficient operations of their respective areas in accordance with Scotiabank’s Values, its Code of Conduct and the Global Sales Principles, while ensuring the adequacy, adherence to and effectiveness of day-to-day business controls to meet obligations with respect to operational, compliance, AML/ATF/sanctions and conduct risk.
• Champion a high-performance environment using a coaching mindset, behaviors and embracing Scotiabank’s values and contributing to an inclusive work environment.

Benefits

• A competitive rewards package that includes a base salary, a performance bonus, company matching programs on pension and profit sharing, paid vacation, personal & sick days, medical, vision, and dental and much more

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Education Level: Associate degree