Requisition ID : 181847
Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.
The Information Security Specialist is responsible for providing security advisory services to business lines, subsidiaries, and affiliates enabling the achievement of the Bank's Information Security Policy and industry best practices.
Key Accountabilities
Participate in initiatives and projects driven by various business lines. Guide project and delivery managers to design and establish sound information security practices, facilitating key artifacts such as security design documents, threat / risk assessments and data classifications with the owner to ensure that risks are identified and effectively managed.
Where required by risk, lead due diligence reviews over third party outsourcing partners to ensure that their security posture aligns with the Bank and industry best practice.
Work with the relationship owner and the third party to create and track an action plan for remediation of issues.
- Acting as a central point of reference and core competency for Information Security, providing first line subject matter expert advise on classification and protection of data through Bank's information security standards, policies and processes, and industry best practices.
- Liaise with internal and external security teams and business lines to develop sound security strategic and tactical plans towards the reliable implementation of consistent and secure control processes to protect the Bank.
- Work with our business line partners to assess and ensure compliance to the Bank standards. Escalating risk through appropriate channels.
Qualifications
- Must have a solid understanding and experience with security controls / mechanisms and threat / risk assessment techniques pertaining to complex data, application and network environments
- Knowledge of cloud security controls, cloud computing concepts, and cloud architecture security is a strong asset
- Knowledge of financial services' Security Governance Framework (policies and standards) is a strong asset
- Knowledge of Agile, Lean, Rapid Labs and other accelerated project frameworks would be an asset
- Strong knowledge of cryptographic concepts leveraged in modern applications and systems
- Strong knowledge of UNIX and Windows operating systems with emphasis on security features
- Sound knowledge of static and dynamic code analysis
- Sound knowledge of identity & Access Management, PKI, Intrusion Prevention, and vulnerability assessments
- Sound knowledge on one or more of the following databases, Oracle, DB2, Sybase, SQL Server
- Sound knowledge of network security components such as firewalls, routers, intrusion detection, anti-virus software
- Working knowledge of regulatory guidelines related to the financial industry like OSFI
- University degree in computer science / related field or relevant work experience
- Certifications in CISSP, CEH, CCSP, CISA and / or CRISC
LI-Hybrid #Cyberatscotia
Location(s) : Canada : Ontario : Toronto
Scotiabank is a leading bank in the Americas. Guided by our purpose : "for every future", we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.
At Scotiabank, we value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone.
If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our Recruitment team know.
If you require technical assistance, please click here. Candidates must apply directly online to be considered for this role.
We thank all applicants for their interest in a career at Scotiabank; however, only those candidates who are selected for an interview will be contacted.
Senior Advisor, Network Security
Ideally looking for experience with information security, Security Architecture, Network and Infrastructure Security, Regulatory Compliance management, Information Security, Cloud Security, Zero Trust, frameworks NIST, PCI-DSS, ISO 27001, Network Detection and Response, Firewalls/IDS/IPS, security t...
Security Advisor Senior - GRC
Together, with our strong team of Cybersecurity risk advisory and Cybersecurity Supply Chain Risk Management, you will work with state-of-the-art technologies to promote a strong cybersecurity governance and compliance culture for Intact Financial Corporation. Our growing team is looking for a Secur...
Senior Information Security Advisor (Cloud)
You thrive in solutioning for multiple security domains (Application Security, Data Protection, Cloud Security Engineering, Identity and Access Management, Cloud Security Architecture, Network Security, Risk Management, etc. The Senior Information Security Advisor (Cloud) provides guidance to busine...
Senior Security Advisor, Cyber Threat Intelligence
We’re looking for a Senior Security Advisor to join our growing team!. As a Senior Cyber Threat Intelligence Advisor/Specialist, you will be a key member in leading the cyber threat intelligence practice, to seek out cyber threats and inform key collaborators within security to help minimize potenti...
Senior Security Advisor
The Information Security Specialist is responsible for providing security advisory services to business lines, subsidiaries, and affiliates enabling the achievement of the Bank's Information Security Policy and industry best practices. Guide project and delivery managers to design and establish soun...
Senior Advisor, Corporate Security
The Senior Advisor for Corporate Security will play a pivotal role in ensuring the safety and security of our organization. The Senior Advisor role will be based in Toronto and will report to the Manager, Corporate Security. Corporate Security at CPP Investments develops and maintains a comprehensiv...
Senior Security Advisor
Our client, a transportation and infrastructure organization, is looking for a Security Advisor to support the major project focused on the GTHA Go Train expansion. Note: extensive experience in or working with security architecture is required. ...
Security Advisor Senior - OSFI
Together, with our strong team of Cybersecurity risk advisory and Cybersecurity Supply Chain Risk Management, you will work with state-of-the-art technologies to promote a strong cybersecurity regulatory compliance for Intact Financial Corporation. You will focus on addressing the requirements of th...
Cyber Security Data Governance Specialist
Job Title: Data Governance Cyber Security Specialist. ...
Cyber Security Specialist
The Senior Cybersecurity Specialist will be responsible for developing and implementing comprehensive cybersecurity strategies and solutions, with a focus on Security Cloud Architecture and Risk Assessment. This requirement is to be part of Intuitive’s Cybersecurity Program and will be part of the C...