Title: Vice President, Cyber & IT Risk, Global Risk Management
Requisition ID: 253471
Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.
Purpose
The Vice President, Cyber & IT Risk, Global Risk Management (The VP), provides strategic direction, leadership and oversight for Cyber & IT Risk globally ensuring business strategies, plans and initiatives are supported in compliance with governing regulations, internal policies and procedures.
Accountabilities
- Leads and drives a customer focused culture throughout their team to deepen client relationships and leverage broader Bank relationships, systems, and knowledge.
- Leads the Cyber & IT risk management program for the Bank across the enterprise and in all geographies. Ensure the Cyber & IT Risk governance framework is sound and effectively integrated into the Bank’s operational risk management and governance program(s) and overall Risk Management framework. Ensure risk appetite measures are appropriate and within the Bank’s risk appetite.
- Provide independent challenge on the design, operation and measurement of key Cyber and IT controls—including DLP, IAM/PAM, network security, cloud security and vulnerability management—to ensure risk metrics and KRIs accurately reflect residual risk and align with the Bank’s risk appetite.
- Oversee second line assessment of technology architectures and emerging solutions, including cloud platforms, Zero Trust models, DevSecOps practices and threat detection capabilities, ensuring secure‑by‑design implementation and adherence to regulatory and internal control expectations.
- Strengthen and maintain collaborative relationships with First Line technology, cybersecurity and operations partners, enabling transparent issue escalation, timely remediation, and an aligned, enterprise-wide approach to managing Cyber & IT Risk.
- Design and maintain consistent processes and methodologies focused on the profiling, identification, assessment, and measurement of the various components of Cyber and IT Risk enterprise wide. Independently assess material IT and Cyber risks and report on these in an actionable manner.
- Manage any ongoing interactions with OFSI and coordinate interactions with regulators in other jurisdictions on IT related matters.
- Directs day-to-day activities in a manner consistent with the Bank’s risk culture and the relevant risk appetite statement and limits. Communicates the Bank’s risk culture and risk appetite statement throughout their teams.
- Creates an environment in which his/her team pursues effective and efficient operations of his/her respective areas, while ensuring the adequacy, adherence to and effectiveness of day-to-day business controls to meet obligations with respect to operational risk, regulatory compliance risk, Anti-Money Laundering / Anti-Trafficking risk and conduct risk, including but not limited to responsibilities under the Operational Risk Management Framework, Regulatory Compliance Risk Management Framework, Anti-Money Laundering / Anti-Trafficking Global Handbook and the Guidelines for Business Conduct.
- Builds a high-performance environment and implements a people strategy that attracts, retains, develops, and motivates their team by fostering an inclusive work environment; communicating vison/values/business strategy and managing succession and development planning for the team.
Education / Experience
- Related university degree required or equivalent experience.
- Over 15 years of IT experience (operations, development, and management) with insight into IT risk management, audit and governance.
- Requires strong leadership, communication and strategic influencing capability supported by well-developed analytical and strategic thinking competencies.
- Expert knowledge and understanding of complex, leading edge technology.
- Expert knowledge of multiple global businesses including related systems and procedures.
- Expert ability to balance competing or conflicting goals of various departments and stakeholders which requires a match, diplomatic approach and highly developed negotiation & influencing skills.
- Must be a forward thinker with ability to anticipate future events, trends, problems and opportunities and perceive patterns as they emerge.
Location(s): Canada : Ontario : Toronto
Scotiabank is a leading bank in the Americas. Guided by our purpose: "for every future", we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.
At Scotiabank, we value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone. If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our Recruitment team know. If you require technical assistance, please click here. Candidates must apply directly online to be considered for this role. We thank all applicants for their interest in a career at Scotiabank; however, only those candidates who are selected for an interview will be contacted.
Nearest Major Market: New York City
Job Segment:
Risk Management, Cyber Security, Investment Banking, Compliance, Banking, Finance, Security, Legal