Job Summary
Job Description
What is the opportunity?
This role participates in and leads some of the execution of the Wealth Management Technology & Solutions (WMTS) Operational Risk Annual Plan and execution of operational risk management (ORM) and IT Risk management within WMTS.
The role is also responsible for participating in planning and managing Operational Risk Management programs and processes as they flow across WMTS.
Individual contributor with expert understanding of US and Canadian IT regulations, audit methodology, general computing controls (e.
g. logical access, patch and configuration management, change & incident management, etc.) and expert communication skills, acting as the single point of contact for internal / external audit engagements and regulatory requests for WMTS and US Wealth Management IT Risk.
Services provided cover audit ®ulatory response, risk & compliance exposure reporting, risk advisory & awareness, and IT & operational risk analysis
Wh at will you do?
- Lead preparation of periodic regulatory presentations, including associated monitoring activities, and contribute to presentation execution
- Lead coordination across technology (WMTS and larger T&O) and Business teams to ensure risk profiles are appropriately managed (e.
g. ensuring breached KRIs have viable go-to-green plans)
- Lead WMTS engagement of periodic audits and regulatory exams, working closely with stakeholders to ensure evidence is submitted on time and that management has an early indication of potential issues
- Support the review of applications across WMTS to determine their SOC1, SOX and / or Crown Jewel applicability
- Contribute to relationship building with enterprise stakeholders (e.g. Internal Audit and Group Risk Management)
- Contribute to the execution of Risk and Control Self Assessments for WMTS
What do you need to succeed?
Must-have
Expert knowledge of the global regulatory landscape impacting financial institutions (e.g. OSFI, FRB, FINRA, OCC, FCA, MAS), including control requirements (e.
g. NYDFS, SOX, GLBA, GDPR)
- Expert communication (verbal and written) skills, including a strong appreciation of relationship management
- Strong knowledge of general computing controls (e.g. logical access, patch & configuration management, change & incident management, etc.)
- Strong knowledge of IT and operational risk management processes, methods and tools
- Demonstrable technical knowledge and experience covering the operating systems (e.g. Unix, Windows, zOS) and database systems (e.
g. Oracle, SQL Server, Sybase, DB2)
CISA or CRISC Certifications
Nice-to-have
- CISSP certification
- CCSP or CCSK Certifications or demonstrable knowledge
- Knowledge of GRC tools (e.g. ServiceNow, Archer)
What's in it for you?
We thrive on the challenge to be our best, progressive thinking to keep growing and working together to deliver trusted advice to help our team and business partners.
We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.
- A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable
- Leaders who support your development through coaching and managing opportunities
- Ability to make a difference and lasting impact
- Work in a dynamic, collaborative, progressive, and high-performing team
- Flexible work / life balance options
- Opportunities to do challenging work
- Opportunities to take on progressively greater accountabilities
- Opportunities to building close relationships with business partners
LI-Hybrid
LI-POST
TECHPJ
Job Skills
Application Security, Critical Thinking, Cyber Security Management, Decision Making, Detail-Oriented, Information Security, Information Security Management, Information Technology (IT) Risk, Information Technology (IT) Risk Management, Information Technology Security, Internal Auditing, Interpersonal Relationship Management, IT Security Architecture, Performance Management (PM), Relationship Management, Risk Management
Senior Analyst& Vendor Management & Operational Risk
Additionally, this position assists the Director in monitoring operational risk activities across DUCA businesses and operations and in preparing operational risk management reports. As an integral part of DUCA’s Risk Management team, the Senior Analyst, Vendor Management & Operational Risk mana...
Manager, Cyber Security & IT Risk Management
VSS TRM is looking to hire a Manager, Cyber Security & IT Risk Management who has 5 key areas of responsibilities - Planning, Design, Development, Operations, and Reporting. Confidentiality, Cyber Security Management, Decision Making, Detail-Oriented, Encryption Software, Group Problem Solving, High...
Senior Risk Manager, Information Risk Management
You will partner with technology on identifying and implementing solutions for automation working closely with our Information Risk Intelligence and Reporting team members to collect, review and aggregate risk data for reporting critical information into for senior and executive management. The posi...
Senior Manager, Wealth Management Taxation
The Senior Manager, Wealth Management Taxation plays a key role in supporting wealth advisors, planning specialists, and banking partners across Scotia Wealth Management by providing tax expertise and enhancing the delivery of the Total Wealth offering. The Senior Manager will be closely involved wi...
Senior Manager, Loyalty Revenue Growth and Vendor Management
The Senior Manager of Loyalty Revenue Growth and Vendor Management is responsible for managing the day to day relationships with a set of assigned CPG suppliers. The ideal candidate will have experience with CPG client management and experience working with marketing intelligence and consumer insigh...
Senior Manager, Revenue Growth Management
Process stewardship for all LS customer investments (trade spend), lead ROI assessments and the management of risks and opportunities to support profitable revenue growth . You will report to the Director, Revenue Growth Strategy & Management (RGM), and be a key business partner to the Customer ...
Senior IT Risk and Compliance Consultant
Maintain a thorough understanding of technology and GRC practices to assist with IT risk management in a rapidly changing IT environment. Over 7 years of experience in IT Governance, IT Risk & Compliance, and IT Audit. Connect with IT teams to understand their business processes, how they manage...
Senior Analyst, Enterprise Risk Management
Experience and knowledge of Risk Management concepts like Operational risk management, Risk appetite, Internal controls, Business continuity management, Crises management, Third-party risk management, Cyber risk, and related operational resilience concepts. The ERM - Senior Risk Analyst (SRA) you wi...
Senior Manager, Identity & Access Management Onboarding (GCS)
Critical Thinking, Cyber Security Management, Decision Making, Detail-Oriented, Information Security Management, Information Technology Security, Interpersonal Relationship Management, IT Security Architecture, Performance Management (PM). The Identity and Access Management (IAM) Onboarding Team is ...
Senior Manager, Incident Management (Fraud Threat Management)
In the role of Senior Manager, Incident Management, you're responsible for building, managing, and enhancing Scotiabank's capability to identify and respond to account-level threats and attacks at scale. If you require accommodation (including, but not limited to, an accessible interview site, alter...