Senior Manager, Cloud Security Engineering

Scotiabank • Toronto, ON

23h • Onsite

About The Position

The Senior Manager, Cloud Security Engineering is responsible for providing strong leadership to a dedicated team of engineers who support the Cloud Security toolsets. This team is charged with the design and implementation of enterprise-level security platforms, ensuring robust protection for the bank's technology infrastructure. In this role, the Senior Manager leads a team of platform engineers, guiding them in the execution and delivery of the enterprise Cloud Security product strategy. This involves setting clear objectives, providing mentorship, and ensuring that platform engineering initiatives align with the broader strategic goals of the organization. The Senior Manager facilitates collaboration across different departments with the aim of making strategic platform engineering decisions. Emphasis is placed on technical design and seamless integration with DevOps practices. This cross-functional approach ensures that security solutions are embedded into the bank’s development and operational workflows. Outstanding verbal and written communication skills are essential for this role. The Senior Manager must be able to distill and convey complex technical information to executive management, including details related to risks, resource utilization, and the impact on project roadmaps. Effective communication ensures alignment among stakeholders and supports informed decision-making. It is imperative that all activities undertaken in this role comply with applicable governing regulations, as well as internal policies and procedures. The Senior Manager is responsible for ensuring that the team’s work adheres to these standards, thereby supporting the bank’s commitment to operational integrity and regulatory compliance.

Requirements

• Minimum 8 years of IT/Security work experience, with at least 3 years leading a team on securing AWS, Azure or GCP.
• 2+ years of experience directly managing or leading engineering teams.
• Proficiency in scripting/programming (Python, Bash, GO) and Infrastructure as Code (Terraform)
• Preferred deep understanding of Banking (preferred Scotiabank) process, procedures and cross-functional engagement.
• Excellent verbal and written communication, negotiating and interpersonal skills with the ability to summarize material for senior management.
• Assist senior management with budgeting, estimations, and resource planning.
• Excellent people management, coaching and leadership skills and experience.
• Good understanding of Security and IT service delivery and a solid understanding of mapping stakeholder requirements to results.
• Experience with and knowledge of project methodologies such as Waterfall, Agile and DevOps in delivering large scale solutions in an enterprise environment.
• Broad understanding of Information Security and Technology domains with focus on the Financial Industry will be an asset.
• Strong knowledge of cloud development technologies and tools such as Containers, VMs and Micro services with proven experience with a cloud provider (Google Cloud, Microsoft Azure).
• Experience working with Internal Audit and Regulatory Assessments (e.g., SOX, OSFI, CDIC, etc.) and addressing compliance gaps.
• Experience collaborating with various Scotiabank engineering teams such as (but not limited too) Scotia Digital, GTS, IPM and IS&C to foster a common goal and solve complex problems.
• Undergraduate Degree in Computer Science, Diploma or technical equivalent experience is required.

Nice To Haves

• CISSP, CCSK or ITIL.
• Fluency in Spanish

Responsibilities

• Lead and manage a team of Cloud Security Engineers to implement and tune Cloud Native Application Protection Platforms, Cloud Security Posture Management and Cloud Workload Protection tools to all the cloud environments in the organization.
• Lead and Implement security controls for containerized environments, ensuring secure container registries, runtime protection, and service mesh security.
• Lead and Implement security controls for Enterprise CI/CD pipelines.
• Translate high-level information security policies and business objectives into actionable engineering roadmaps
• Closely collaborate with Product, Architecture and operations teams to ensure implementation of the bank’s enterprise security strategy.
• Manage platform implementation and project deliverables, including communicating clearly to stakeholders, ability to define critical chain of events to execute a project successfully, and strong project management skills.
• Work closely with their Director to facilitate cross-department strategic decisions and work with leaders in defining and building executive communication.
• Manage resource allocation, estimation for new initiatives, assessment of incoming work, development and maintenance of a roadmap for the team.
• Deliver projects to remediate IT Risk, Internal Audit and Regulatory (including OSFI) associated with security platforms.
• Build and maintain stakeholder buy-in and relationships across IS&C and IT business line teams.
• Understand how the Bank’s risk appetite and risk culture should be considered in day-to-day activities and decisions.
• Actively pursues effective and efficient operations of their respective areas in accordance with Scotiabank’s Values, its Code of Conduct and the Global Sales Principles, while ensuring the adequacy, adherence to and effectiveness of day-to-day business controls to meet obligations with respect to operational, compliance, AML/ATF/sanctions and conduct risk.
• Champions a high-performance environment using a coaching mindset, behaviors and embracing Scotiabank’s values and contributing to an inclusive work environment.

Benefits

• Diversity, Equity, Inclusion & Allyship
• Accessibility and Workplace Accommodations
• Upskilling through online courses, cross-functional development opportunities, and tuition assistance.
• Competitive Rewards program including bonus, flexible vacation, personal, sick days and benefits will start on day one.
• Community Engagement

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree