Senior Manager, Technology Resilience Governance

Scotiabank • Toronto, ON

4d • Onsite

About The Position

The Enterprise Operational Resilience (EOR), Technology Resilience Governance team plays an important role in managing and enhancing the technology resilience in support of the Bank’s critical business functions. This role is within the mandate of Enterprise Security, and part of the global First Line of Defense for all technology risk domains, including Cyber Security, System Availability and Reliability, Disaster and Backup Recovery, Third Party Management, and Audit and Regulatory issue remediation. The role is accountable for strengthening governance, controls, data and communications that demonstrate the Bank’s ability to prevent, withstand, respond to, and recover from technology disruptions affecting critical business services. There are many exciting opportunities to grow in the areas of enterprise resilience, resilience engineering, risk management, business technology development and work with many cross-functional teams within the Bank.

The Senior Manager, Technology Resilience Compliance and Communications role supports the Director, Technology Resilience Governance and SVP Enterprise Operational Resilience achieve the CIO’s top resilience priorities by collaboratively assessing, analyzing and quantifying technology and security resilience posture, developing processes and supporting data that enable compliance and establishing a resilience centric communications approach to enable implementation. This role is part of a strategic and comprehensive cross-functional organization, supports controls and compliance implementation in accordance with regulatory expectations, risk appetite, and evolving resilience practices. It plays a critical part in demonstrating the Bank’s ability to management technology resilience risk in line with regulatory expectations and to support the continuity of critical business services under severe by plausible disruption scenarios.

Requirements

• Solid communication (verbal/written) skills in English. The same in Spanish is an asset.
• At least 5 years of demonstrated experience in either a resilience or technology risk management functional role, or as a control function, with demonstrated knowledge in regulatory, legislative and industry requirements governing the management of technology systems and information (OSFI, FFIEC, DORA, COBIT, NIST, etc.).
• At least 2 years of experience working in IT or business operations environment, in a governance function, or leading resilience initiatives in a matrixed environment.
• Past achievements that have demonstrated a strong ability to leverage collaboration and strategic influencing, with the ability to challenge constructively, across business lines to achieve intended results.
• Throughout your career, demonstrated the ability to balance competing or conflicting goals with a good sense of urgency.
• Leveraged your data analytics, visual dash-boarding and presentation preparation skills to effectively communicate and to support your perspectives.
• Possess or are in active pursuit of certification(s) in the areas of IT /Operational Resilience, IT management, disaster recovery, or IT risk management.

Responsibilities

• Work with the Director to identify, assess, prioritize and report on technology resilience posture across technology (CIO) areas. This will require working with various risk and technology owners, and leadership teams.
• Support detailed resilience assessments and align output with compliance of defined policies and common standards, including the Technology Availability and Resilience Policy within the Enterprise Operational Resilience Framework.
• Identify pervasive resilience deficiencies that are common across the landscape and help identify preventative controls and processes and, track remediation of deficiencies.
• Continuously identify opportunities to improve effectiveness and enhancements to identify resilience building activities and management policies and processes.
• Drive organizational change through the development and maintenance of communications relating to policy and programme changes and developments, engage stakeholders and provide a roadmap of program deliverables and scheduled communications and awareness activities.
• Partner with other risk groups to assess, implement and communicate new/updated resilience controls, frameworks, policies, metrics and limits.
• Appropriately challenge the internal design and implementation resilience initiatives and collaborate in the design of resilience controls and the mitigation of key issues and gaps.
• Demonstrate and maintain up to date knowledge of regulatory, legislative and industry requirements governing the management of technology systems and information (OSFI, FFIEC, DORA, COBIT, NIST, etc.), including analysis of regulatory changes, updating and communicating changes, impacts and actions to be considered.
• Have opportunities to collaborate and lead within a cross-functional teams of professionals to support EOR and CIO priorities, drive delivery of various resilience related initiatives, and provide coaching and guidance to develop team members to drive team effectiveness and results.

Benefits

• Diversity, Equity, Inclusion & Allyship
• Accessibility and Workplace Accommodations
• Upskilling through online courses, cross-functional development opportunities, and tuition assistance.
• Competitive Rewards program including bonus, flexible vacation, personal, sick days and benefits will start on day one.
• Community Engagement

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed