Senior Manager, Cyber Security and IT Risk

Is this role right for you?

In this role, you will:

Regulatory & Audit Readiness

• Coordinate and prepare Cyber & IT Risk responses, briefing materials, evidence and other deliverables for regulatory examinations and engagements.
• Work with subject matter experts and stakeholders to ensure regulatory materials are clear, accurate, complete, internally consistent and supported by appropriate evidence.
• Support Cyber & IT Risk engagement with Internal Audit, including responses to observations and management actions.
• Review regulatory and audit materials through a second-line risk lens and identify gaps, inconsistencies or areas requiring further analysis or challenge.
• Anticipate upcoming requirements and ensure Cyber & IT Risk is well prepared for regulatory and audit engagements.

Issues, Remediation & Commitments

• Drive disciplined management of Cyber & IT Risk-owned audit issues, regulatory commitments, remediation activities and other priority actions.
• Maintain clear visibility of milestones, owners, dependencies, evidence requirements and target dates.
• Proactively follow up on actions and identify potential delivery, quality or dependency risks before commitments are at risk.
• Review remediation plans and closure evidence to assess whether actions address the underlying risk and support the intended outcome.
• Provide clear reporting and timely escalation of issues requiring management attention or intervention.

Second-Line Risk Oversight & Challenge

• Provide credible second-line review and challenge across Cyber and Technology Risk matters, including regulatory responses, audit observations, remediation plans, risk assessments, policies and standards, and issue closure.
• Apply sound risk judgment to identify gaps, assumptions and areas requiring further analysis or challenge.
• Develop clear risk perspectives and recommendations to support senior management decision-making.
• Work constructively with first-line partners and subject matter experts to drive practical, risk-informed outcomes.
• Identify themes across issues, audit findings, regulatory matters and other risk information that may indicate broader or emerging concerns.

Strategic Execution

• Take ownership of complex or ambiguous assignments, establish a clear path forward and drive work through to completion with minimal direction.
• Anticipate upcoming priorities, deadlines, dependencies and decision points and proactively address them.
• Coordinate across teams to obtain required input, resolve dependencies and maintain momentum.
• Prepare clear, concise and executive-ready briefings, presentations, risk perspectives and decision materials.
• Identify opportunities to strengthen Cyber & IT Risk governance, reporting and ways of working.

Do you have the skills that will enable you to succeed? We’d love to work with you if you have:

• 7+ years of relevant experience in Cyber Security, Technology Risk, IT Risk, audit, regulatory or related disciplines, or equivalent demonstrated expertise.
• Broad or deep knowledge across key Cyber and Technology Risk domains, with the ability to understand technical issues, assess risk implications and engage effectively with subject matter experts.
• Experience supporting regulatory examinations, Internal Audit engagements, issue remediation or significant risk-management commitments.
• Demonstrated ability to develop high-quality materials for senior executives, regulators, auditors or governance forums.
• Strong understanding of first-line management, second-line risk oversight and Internal Audit responsibilities.
• Experience within a large, complex, regulated financial institution is preferred.
• Relevant professional qualifications such as CISSP, CISM, CRISC or CISA are considered an asset.
• Exceptional organization, attention to detail and follow-through.
• Strong bias toward action and demonstrated ability to work independently.
• Ability to bring structure to ambiguous or complex assignments.
• Ability to manage multiple priorities and deadlines without losing sight of quality.
• Strong analytical thinking, risk judgment and constructive challenge.
• Excellent written and verbal communication.
• Ability to simplify complex Cyber and IT matters for executives, regulators and non-technical audiences.
• Strong stakeholder management and ability to drive action without direct authority.
• Ability to anticipate requirements, identify potential problems and escalate appropriately.

What’s in it for you?

• An inclusive & collaborative working environment that encourages creativity, curiosity, and celebrates success!
• We offer a competitive rewards package: Performance bonus, Employee Share Ownership Program, and Pension Plan Matching, Health Benefits from day one!
• Your career matters! You will have access to career development and progression opportunities.