Manager

Tangerine is Canada’s leading direct bank. We offer flexible and accessible banking options, innovative products, and award-winning Client service.

The reason why Tangerine employees come to work each day is to help Canadians live better lives. We focus on making a difference in our communities, and that includes our own internal community.

It’s important to us that our employees feel empowered and enthusiastic about belonging to our Orange culture.

Tangerine Technology Risk Management team plays an important role in the Bank’s Three Lines of Defense Framework, providing First Line of Defense for Tangerine and the Bank for all technology risk domains, including Cloud, Cyber Security, Data Privacy, Software Currency, Disaster and Backup Recovery, Third Party Management, and Audit and Regulatory issue remediation.

As a 1B Line of Defence function, this role provides leadership and subject-matter expertise to assist Tangerine stakeholders in the identification, evaluation, treatment and monitoring of risks to the Bank’s data assets and the systems where information resides.

Reporting to the Director of Technology Risk Management, the Manager, Technology Risk is a key contributor for the development and execution of an enterprise Technology Risk Management Program.

Is this role right for you?

IT Risk Governance

Maintain the compliance oversight of Scotiabank’s security and risk management framework, policies and standards for managing risks to its information assets and systems.

• Identify, assess, prioritize and report on material IT risks and aligned business areas. This will require working with various Risk owners and other control function groups.
• Liaise with Scotiabank counterparts to identify evolving requirements.
• Monitor evolving industry best practices, regulatory and legislative requirements;
• Provide 1st Line of Defence functions with ongoing guidance to support the implementation of, and compliance to established IT and security requirements.
• Perform various types of data analysis work and prepare monthly / quarterly reporting.

IT Risk Advisory

Provide direction to Tangerine’s functional teams to build their capability to identify, assess, mitigate and monitor risks associated with their use of information and IT systems.

• Oversee Technology / Cyber risks and controls associated with Google Cloud and IT Operations. Conduct control testing and track remediation.
• Analyze and respond to risk assessment requests assigned to Technology Risk Team.
• Build positive culture for the management of IT and security risks. Deliver ongoing counsel to risk owners to create IT risk awareness.

IT Risk & Compliance Monitoring

Establish monthly reporting of KPI dashboard.

• Maintain Tangerine’s IT KPIs and KRIs within risk appetite for the IT domains assigned.
• Lead engagement with Tangerine’s 2nd and 3rd Line of Defense function to influence the focus, scope and criteria for the testing of the Bank’s IT risk capabilities.
• On-going monitor and track issues raised by Internal Audit, assist risk owners to ensure remediation is completed within pre-defined timelines and risk is addressed appropriately

Do you have the skills that will enable you to succeed in this role?

College or University degree, or equivalent experience.

• 5+ years’ experience in one of the areas such as technology operations, technology platform, risk management, cyber security etc.
• Good working knowledge of risk management processes.
• General knowledge in regulatory and industry frameworks (PIPIEDA, OSFI, PCI-DSS, NIST, etc.).
• Strong communication and collaboration skills, supported by well-developed logical and analytical competencies.
• Candidates with demonstrated curiosity to learn, adaptable to changing situation and goal oriented will be given preference.
30+ days ago