Senior Audit Manager, Emerging Risk & Cyber Security

Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.

Purpose

This position is responsible for leading and conducting risk-based audit assessments of medium to high complexity following the Bank's Audit Methodology. As a Senior Audit Manager, you will support the Director, Emerging Risk & Cyber Security Audit, by planning and executing risk-based technical audits across Cyber Security, Technology Infrastructure, Cloud, and Digital Banking, to provide opinions on the effectiveness of controls to meet business objectives. In addition, the subject matter expert is expected to be knowledgeable in risks associated with systems development methodologies (Waterfall and Agile), project management, automation and orchestration, data protection, and outsourced IT services.

Key Accountabilities

Execution:

1. Plan and lead collaborative risk-based Information and Cyber Security audits of moderate to high complexity in a local and global context and conclude whether risks are appropriately managed through the existence of effective control or other techniques.
2. When assuming a supervisory role, develop a comprehensive audit plan clearly outlining the objective, scope, deliverables, approach, resourcing, and schedule.
3. Ensure quality of assignments through effective application of the Audit Standard Methodology of the Bank and appropriate use of specific applications and tools.
4. Strive for efficient use of audit resources by monitoring execution of audits assigned, timely escalation, and management of conflicts.
5. Prepare and deliver effective presentations to clients at audit opening and closing meetings.
6. Provide value-adding and effective audit recommendations to client senior management identifying significant issues in a business context.
7. Present audit conclusions and reports in a relevant context ensuring they are supported by an orderly accumulation and analysis of documented audit evidence.
8. Perform accountabilities with minimal supervision and provide audit management and audit client with regular status updates of assignments.
9. Actively seek to be informed of industry and corporate initiatives and trends to support effective audit continuous monitoring of the Banks' management of information and cyber security risks.

Leadership:

1. Maintain information security competency through ongoing professional development and staying abreast of emerging technologies, risks, and controls in information and cyber security.
2. Provide direction, guidance, and expert advice to audit teams globally.
3. Prepare and deliver effective presentations on various audit and information security related matters to Audit senior management and relevant stakeholders.
4. Identify and advise Audit teams on the use of data analytics and other advanced techniques and tools.
5. Establish and maintain solid relationships with audit clients to serve as a catalyst for positive change and improvement of information and cyber security risk management.

Qualifications:

1. 7 years of information and cyber security experience.
2. Excellent written and verbal communication skills.
3. Experience in the assessment of threats and risks over IT processes and assets.
4. Knowledge and experience with security assessment tools and Security Operations Centre software.
5. Knowledgeable in cyber security processes areas such as web application security, secure network security architecture, penetration testing, and malware protection.
6. Excellent analytics skills and proficiency with Microsoft Word, Excel, and PowerPoint.
7. Ability to work independently and as part of a team of professionals.

Education:

1. Bachelor’s degree in Information Technology, Computer Science or equivalent required.
2. One or more of the following certifications: CISA, CISM, CISSP, CCSP, GCIA, CEH is required.
3. Cloud engineering or architecture designation would be an asset.

Location(s): Canada : Ontario : Toronto

Scotiabank is a leading bank in the Americas. Guided by our purpose: "for every future", we help our customers, their families, and their communities achieve success through a broad range of advice, products, and services.

At Scotiabank, we value the unique skills and experiences each individual brings to the Bank and are committed to creating and maintaining an inclusive and accessible environment for everyone.