Requisition ID : 181847
Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.
The Information Security Specialist is responsible for providing security advisory services to business lines, subsidiaries, and affiliates enabling the achievement of the Bank's Information Security Policy and industry best practices.
Key Accountabilities
Participate in initiatives and projects driven by various business lines. Guide project and delivery managers to design and establish sound information security practices, facilitating key artifacts such as security design documents, threat / risk assessments and data classifications with the owner to ensure that risks are identified and effectively managed.
Where required by risk, lead due diligence reviews over third party outsourcing partners to ensure that their security posture aligns with the Bank and industry best practice.
Work with the relationship owner and the third party to create and track an action plan for remediation of issues.
- Acting as a central point of reference and core competency for Information Security, providing first line subject matter expert advise on classification and protection of data through Bank's information security standards, policies and processes, and industry best practices.
- Liaise with internal and external security teams and business lines to develop sound security strategic and tactical plans towards the reliable implementation of consistent and secure control processes to protect the Bank.
- Work with our business line partners to assess and ensure compliance to the Bank standards. Escalating risk through appropriate channels.
Qualifications
- Must have a solid understanding and experience with security controls / mechanisms and threat / risk assessment techniques pertaining to complex data, application and network environments
- Knowledge of cloud security controls, cloud computing concepts, and cloud architecture security is a strong asset
- Knowledge of financial services' Security Governance Framework (policies and standards) is a strong asset
- Knowledge of Agile, Lean, Rapid Labs and other accelerated project frameworks would be an asset
- Strong knowledge of cryptographic concepts leveraged in modern applications and systems
- Strong knowledge of UNIX and Windows operating systems with emphasis on security features
- Sound knowledge of static and dynamic code analysis
- Sound knowledge of identity & Access Management, PKI, Intrusion Prevention, and vulnerability assessments
- Sound knowledge on one or more of the following databases, Oracle, DB2, Sybase, SQL Server
- Sound knowledge of network security components such as firewalls, routers, intrusion detection, anti-virus software
- Working knowledge of regulatory guidelines related to the financial industry like OSFI
- University degree in computer science / related field or relevant work experience
- Certifications in CISSP, CEH, CCSP, CISA and / or CRISC
LI-Hybrid #Cyberatscotia
Location(s) : Canada : Ontario : Toronto
Scotiabank is a leading bank in the Americas. Guided by our purpose : "for every future", we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.
At Scotiabank, we value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone.
If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our Recruitment team know.
If you require technical assistance, please click here. Candidates must apply directly online to be considered for this role.
We thank all applicants for their interest in a career at Scotiabank; however, only those candidates who are selected for an interview will be contacted.
Senior Security Advisor
The Information Security Specialist is responsible for providing security advisory services to business lines, subsidiaries, and affiliates enabling the achievement of the Bank's Information Security Policy and industry best practices. Guide project and delivery managers to design and establish soun...
Security Advisor Senior - GRC
Together, with our strong team of Cybersecurity risk advisory and Cybersecurity Supply Chain Risk Management, you will work with state-of-the-art technologies to promote a strong cybersecurity governance and compliance culture for Intact Financial Corporation. Our growing team is looking for a Secur...
Senior Information Security Advisor (Cloud)
You thrive in solutioning for multiple security domains (Application Security, Data Protection, Cloud Security Engineering, Identity and Access Management, Cloud Security Architecture, Network Security, Risk Management, etc. The Senior Information Security Advisor (Cloud) provides guidance to busine...
Security Advisor Senior - OSFI
Together, with our strong team of Cybersecurity risk advisory and Cybersecurity Supply Chain Risk Management, you will work with state-of-the-art technologies to promote a strong cybersecurity regulatory compliance for Intact Financial Corporation. You will focus on addressing the requirements of th...
Senior Advisor, Corporate Security
The Senior Advisor for Corporate Security will play a pivotal role in ensuring the safety and security of our organization. The Senior Advisor role will be based in Toronto and will report to the Manager, Corporate Security. Corporate Security at CPP Investments develops and maintains a comprehensiv...
Senior Security Advisor – IGA
Our Identity Governance & Administration (IGA) team is undertaking the next phase in its IAM maturity journey and is looking for a senior security advisor!. Our mature IAM practice aims at staying on top of security best practices and standards. Lead / prepare / participate in security and business ...
Senior Security Advisor
Our client, a transportation and infrastructure organization, is looking for a Security Advisor to support the major project focused on the GTHA Go Train expansion. Note: extensive experience in or working with security architecture is required. ...
Analyst, Security IT-GIS-P&Sec A
The IT Security Analyst works with GIS staff to ensure Apotex information and information systems are secure by verifying the Security Architecture and Program are adhered to and evaluated through the use of security tools, assessments, audits and policy. Participates in security event assessments a...
Security Officer (Part-Time)
Performs Security Office, Employee Entrance and Patrol operations as outlined in the Standards of Performance Manual for Security Officers. Patrols front of house, back of house and exterior hotel areas, reporting any safety or security hazards, unacceptable behavior, or suspicious persons to Securi...
Unarmed Enhanced Officer (49710)
Inter-Con employs over 25,000 security officer personnel world-wide, trained and managed by a team of professionals with unsurpassed military, law enforcement, and security experience. As an Armed Security Officer, you will be part of a highly trained security team that supports critical facilities ...