Senior Analyst, Cybersecurity Exceptions Management

Scotiabank•Toronto, ON

8d•Onsite

About The Position

Scotiabank’s Cyber Security Operations (CSOps) team is responsible for protecting the Bank and responding to cyber threats and events. The Cyber Automation & Defense (CAD) group within CSOps is responsible for assessing, implementing, and administering enterprise security controls to safeguard Scotiabank’s informational assets and reduce security risk posture. Reporting to the Senior Manager, Cybersecurity Exceptions Management, the successful candidate will work as part of the CAD team to lead the governance and oversight of Cybersecurity Exceptions processes across the organization. This role ensures that exception requests are properly documented, thoroughly reviewed, risk-assessed, and tracked in alignment with security policies and risk tolerance. The Senior Analyst will play a key role in support of our goal of keeping the bank safe.

Requirements

Post-secondary degree or diploma, preferably in Cybersecurity, Computer Science or related field is required.
Minimum 2 years experience with Data Loss Prevention (DLP) technology and controls.
Minimum 2 years hands-on experience working on security controls/mechanisms.
Experience with enterprise documentation and reporting tools.
Excellent communication (presentation skills, verbal and written). The ability to communicate confidently and clearly at all levels of the organization.
Must be proactive and creative, with strong, proven ability to plan and manage competing priorities, as well as ability to recognize and appropriately handle sensitive and confidential information.

Nice To Haves

Knowledge of Security Exceptions Management is a great asset.
Understanding of DLP risks, governance and standards.
The same in Spanish is a strong asset.
Cybersecurity related certifications are nice to have.

Responsibilities

Lead the governance and oversight of Cybersecurity Exceptions processes across the organization.
Ensure that exception requests are properly documented, thoroughly reviewed, risk-assessed, and tracked in alignment with security policies and risk tolerance.
Coordinate multiple tasks that can be occurring simultaneously.
Problem solve and collaborate across the organization.
Incorporate continuous improvement in daily operations.
Conduct security assessments, documentation, and reporting.
Communicate problems, solutions, and recommendations to senior leadership level.