Manager, Insider Threat

Scotiabank•Toronto, ON

2d•Onsite

About The Position

Contributes to the overall success of the Department in Canada ensuring specific individual goals, plans, initiatives are executed / delivered in support of the team’s business strategies and objectives. Ensures all activities conducted are in compliance with governing regulations, internal policies and procedures. Champions a customer focused culture to deepen client relationships and leverage broader Bank relationships, systems and knowledge. Assist in the development and maintenance of a robust Insider Threat program that would epitomize Scotiabank’s high ethical standards and our culture of integrity, accountability and high competence. Identify organizational policies and processes that support Insider Threat mitigation and incorporate them into projects/initiatives Continuously seek, identify, and promote opportunities for Insider related policy and/or operational enhancements between multiple groups across the organization who all take part in Insider Threat mitigation (including Corporate Security, HR, Information Security/Controls, Legal, Compliance, TPRM and others) that would facilitate stronger overall insider threat mitigation Demonstrated comprehension of Insider Threat to support the development of a program for prevention, identification, mitigation and effective response to the entire spectrum of threats that can materialize through Insider behaviors in the physical, financial, and virtual/digital realms. Support activities related to the Enhanced Monitoring Program including support of Intake Change Requests, Rule Governance, development of communications, as well as trend analysis to inform program enhancements pertaining to insider threat trends and executive reporting. Support leadership in the execution of activities related to the preparation of materials for the executive Insider Threat Council and tracking of workstreams items from the Insider Threat Tactical Working Group Understand how the Bank’s risk appetite and risk culture should be considered in day-to-day activities and decisions. Actively pursues effective and efficient operations of their respective areas in accordance with Scotiabank’s Values, its Code of Conduct and the Global Sales Principles, while ensuring the adequacy, adherence to and effectiveness of day-to-day business controls to meet obligations with respect to operational, compliance, AML/ATF/sanctions and conduct risk. Champions a high performance environment and contributes to an inclusive work environment.

Requirements

Post-secondary degree(s) and/or university/college courses in criminology, Risk Management, Information Security, business, and/or law or equivalent career experience.
Highly accomplished and current analytical skillset (in at least one of the following: crime, tactical, operational,) including researching, collecting, evaluating and analyzing information to provide recommendations to senior management and support to investigations – required
Thorough knowledge of Scotiabank’s business, supporting systems and processes – Required
Demonstrated knowledge and experience in dealing with Insider Threat trends, mitigation methodologies, legislation/regulation in Canada (required)
Experience in leading projects/programs which involved cross-functional stakeholders
Experience and knowledge in managing a risk program or framework
Experience with addressing regulatory requirements including OSFI’s Guideline for Operational Risk Management
Knowledge of the Financial Services industry and regulatory environment
Strong knowledge of Governance, Risk and Compliance and Controls frameworks
Extensive experience in preparing and presenting briefing material for senior management to advise on Insider Threat and/or other operational risks and/or control frameworks.
Experience conducting risk and control assessments and making change recommendations.
Possesses highest ethical standards and experience working with sensitive and confidential information
Ability to work well under pressure and meet deadlines

Nice To Haves

Insider Threat related experience is desirable
Close familiarity with the COSO Internal Control Integrated Framework and other risk management/internal controls frameworks/methodologies – Desirable
CFE, CAMS, CISSP, Insider Threat Program Manager and/or similar financial crime/Information Security training and/or designation – An asset
Demonstrated knowledge and experience in dealing with Insider Threat trends, mitigation methodologies, legislation/regulation in other key markets (preferred)

Responsibilities

Assist in the development and maintenance of a robust Insider Threat program.
Identify organizational policies and processes that support Insider Threat mitigation and incorporate them into projects/initiatives.
Seek, identify, and promote opportunities for Insider related policy and/or operational enhancements between multiple groups across the organization.
Support the development of a program for prevention, identification, mitigation and effective response to insider threats.
Support activities related to the Enhanced Monitoring Program including support of Intake Change Requests, Rule Governance, development of communications, as well as trend analysis.
Support leadership in the execution of activities related to the preparation of materials for the executive Insider Threat Council and tracking of workstreams items from the Insider Threat Tactical Working Group.
Understand how the Bank’s risk appetite and risk culture should be considered in day-to-day activities and decisions.
Actively pursues effective and efficient operations of their respective areas in accordance with Scotiabank’s Values, its Code of Conduct and the Global Sales Principles.
Ensure the adequacy, adherence to and effectiveness of day-to-day business controls to meet obligations with respect to operational, compliance, AML/ATF/sanctions and conduct risk.
Champions a high performance environment and contributes to an inclusive work environment.