U.S. IT Director, Risk

 

 

 

Requisition ID: 242179

 Salary Range: 157,700.00 - 264,200.00 

Please note that the Salary Range shown is a guideline only. Salary offered may vary based on factors, including, but not limited to, the successful candidate’s relevant knowledge, skills, and experience.

 

Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.

 

Global Banking and Markets 

 

Global Banking and Markets (GBM) is a leading Canadian Capital Markets and Investment Banking business with a growing platform in the US and Latin America, operating globally for over 100 years. Scotiabank’s strong U.S. presence provides our clients an important bridge to this key global market for trade and investment flows across the Americas and the world. 

 

Global Banking & Markets provides a full range of investment banking, credit and risk management products and services relevant to the financing and strategic development needs of our clients. Our products include debt and equity financing, mergers & acquisitions, corporate banking, institutional equity sales, trading and research, fixed income products, derivatives, energy, foreign exchange and precious & metals. We also cross-sell the full range of wholesale products and services offered by the Scotiabank Group.  

 

Be part of an innovative, Global Capital Markets and Investment Banking business with a unique geographic footprint that puts capital to work for our clients across industries!  We work together to drive ambition for every future! 

 

Purpose

 

The US IT Risk Director is a strategic leader within the Technology First Line of Defense, responsible for overseeing and enhancing the technology risk management framework for the US portfolio. This role ensures robust risk controls, compliance with regulatory and internal requirements, and the advancement of a strong risk culture across all technology domains. The Director partners closely with senior technology and business leaders, risk owners, and control functions to proactively identify, assess, and mitigate technology risks.

 

US GBME, IT Risk Advisory team plays an important role in the Bank’s Three Lines of Defense Framework, providing First Line of Defense for the GBME portfolio on all technology risk domains, including Cyber Security, Data Privacy, Software Lifecycle Management, Capacity, Incident Management, Disaster and Backup Recovery, Third Party Management, Project Management, and Audit & Regulatory issue remediations.

 

Director, IT Risk (CIO Risk Advisor) directly supports the CIO/Vice-President, US GBME Technology, to collaboratively assess, analyze and quantify technology risks. This role is part of a strategic and comprehensive IT Risk Management Function within the Technology First Line of Defense and ensures design and implementation in accordance with regulatory expectations, risk appetite, organizational risk practices and evolving business practices.

 

Additional responsibilities include leading the success of the first line Internal Control and Regulatory Management function for the engineering portfolio, building robust technology risk controls and processes (including non-financial risks such as Cyber Risk, Availability, Resiliency, and Operational Risk), and ensuring all activities are conducted in compliance with governing regulations, internal policies, and procedures

 

What You'll Do

 

• Advise and support risk owners in day-to-day risk management activities, ensuring adherence to policies, frameworks, standards, and guidelines.
• Lead a consistent approach across the regions (U.S., APAC, UK).
• Act as a primary interface between risk owners and other risk groups, facilitating and executing risk management activities.
• Compile and present risk update reports for various risk groups, including technology risk updates to the various Technology and Risk committees.
• Identify, assess, prioritize, and report on material IT risks for IT and aligned business areas; ensure output is recorded in enterprise systems and comply with all policies and standards.
• Ensure implementation of a strong IT risk culture in partnership with risk owners and other control functions.
• Conduct detailed IT risk assessments and ensure outputs are recorded in enterprise to