Senior Manager, IT Remediation & Horizontal Programs

Banque Scotia (Bank of Nova Scotia)•Dallas, TX

24d

About The Position

The Senior Manager, IT Remediation & Horizontal Programs is responsible for help driving the execution of enterprise-wide technology risk remediation initiatives. This role is focused on closing high-impact risk issues, control weaknesses, and regulatory findings across critical domains - ensuring sustainable, audit-defensible solutions that reduce technology risk exposure across the bank. This role will support the IT Remediation & Horizontal Programs team with horizontal remediation programs that span multiple control areas, including Identity & Access Management (IAM), Data Protection, Vulnerability Management, Asset & Software Currency, Endpoint Controls, and Technology Resiliency. This role requires deep experience in root cause analysis, program delivery, and embedding long-term risk reduction across a complex and regulated technology landscape. This is a high-visibility role requiring partnership across Cybersecurity, Infrastructure, Risk, Compliance, and Application teams, with frequent engagement with internal audit and external regulators.

Requirements

7+ years of experience in IT risk remediation, technology control uplift, or regulatory remediation programs.
Proven record leading enterprise-scale remediation efforts in a regulated environment (preferably banking or financial services)
Proven strong communication and strategic influencing capability, supported by well-developed analytical and strategic thinking competencies.
Strong Technology Risk and Controls management experience; systems design, change management, release management, security services.
Strong knowledge of multiple global businesses including related systems and procedures.
Strong ability to balance competing or conflicting goals of various departments and stakeholders which requires a mature, diplomatic approach and highly developed negotiation and influencing skills.
Excellent communication, facilitation, and presentation skills for developing communication strategies.
An ability to anticipate future events, trends, problems and opportunities, and perceive patterns as they emerge.
Bachelor's degree in Information Technology, Cybersecurity, Engineering, or a related discipline

Nice To Haves

Master's or MSA is an asset.

Responsibilities

Support the delivery of complex technology risk remediation programs addressing regulatory findings, audit issues across global and U.S. regions.
Provides oversight, planning, execution, and delivery of the IT Risk and Cyber Security remediation program. Later leveraging best practices/ learnings globally to lead a Global IT Risk and Cyber Security transformation. Overseeing the implementation of risk remediation plans.
Drive remediation and control uplift across key enterprise domains, including: o Identity & Access Management (IAM): Close access design and entitlement control gaps. o Data Protection: Improve protection of sensitive data across platforms and jurisdictions. o Vulnerability Management: Accelerate remediation of known vulnerabilities and address root causes, including process, ownership, and tooling gaps. o Software Currency & Asset Management: Eliminate legacy, unsupported technologies and enforce lifecycle governance. o Endpoint Controls: Uplift control configurations and management capabilities across end-user and server environments. o Technology Resiliency: Coordinate remediation activities stemming from resiliency assessments and Resiliency Steering Committee (SteerCo) direction.
Ensure issues are resolved at the root cause level and solutions are embedded in operational processes to prevent recurrence. Drive risk-based prioritization and execution discipline.
Act as a key remediation support in response to regulatory exams (e.g., OSFI, FRB) and internal audits. Provide credible plans, progress updates, and closure evidence.
Establish effective remediation governance, including risk acceptance processes, remediation tracking, risk metric validation, and closure approvals aligned with enterprise risk and audit standards.
Partner across technology domains, including Infrastructure, Cybersecurity, Application Development, and Compliance, to drive execution, resolve blockers, and ensure consistency in remediation approach.
Promote a culture of control ownership, transparency, and accountability across the technology organization, emphasizing remediation as a strategic and operational priority.
Establish standardized governance models and execution frameworks for technology remediation programs within the Office of the CIO.
Develop and maintain executive dashboards, risk metrics, and board-level materials to report on program status, challenges, and control effectiveness.
Coordinate with regional CIOs and control partners to ensure consistent global execution.

Benefits

Scotiabank wants you to be able to bring your best self to work - and life, every day. With a focus on holistic well-being, our many flexible benefit programs are designed to help support your unique family, financial, physical, mental, and social health needs.

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume