Senior Manager, Enterprise Data Protection

Requisition ID: 267059 

Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.

The Senior Manager, Enterprise Data Protection provides governance, oversight, and advisory support to Technology groups and business lines on the Data Protection control environment, aligned with industry practices and regulatory developments. The role also supports risk transformation, remediation, and regulatory programs. The individual reports to the Director, Enterprise Data Protection. 

Is this role right for you? In this role you will:

• Support the development of the strategy, governance, and operating model across the Data Protection Program elements.
• Collaborate with management to develop recommendations around policies, standards and operating guidelines related to Data Protection.
• Provide advisory services to stakeholders within Technology and Business Lines on Cyber and IT Risk controls.
• Collaborate with key stakeholders to develop controls to safeguard and manage records and information. 
• Collaborate with Technology teams including infrastructure, security engineers, development, architecture, security operations, security advisory and technology risk to assess controls and remediation actions across the operating environment and ongoing initiatives.
• Support the implementation of a strong Data Protection culture in partnership with stakeholders across various business lines and control functions.
• Monitor and report on the performance and risk of data protection controls deployed across the enterprise.
• Support strategic and operational initiatives impacting Data Protection - Cyber and IT Risk Management by assessing against regulatory requirements and internal policies, framework and business needs.
• Work with issue owners and key stakeholders, including monitoring and control testing partners to develop management actions plans where required.
• Identify, assess and map industry development and regulatory requirements into technical controls to safeguard technology, information and records.
• Act as primary liaison with Control Functions in respect of intersections and impacts between their respective policies and programs and the Data Protection Program’s mandate, responsibilities and policies.
• Develop, monitor and report on Data Protection metrics, identifying trends, risks, root causes and remediation actions.
• Ensure the Bank’s risk appetite and risk culture are considered in day-to-day activities and decisions.
• Help drive a customer focused culture throughout the team to deepen client relationships and leverage broader Bank relationships, systems, and knowledge.
• Support an environment that promotes effective and efficient operations of his/her respective areas in accordance with Scotiabank’s Values, its Code of Conduct and the Global Sales Principles, while ensuring the adequacy, adherence to and effectiveness of day-to-day business controls to meet obligations with respect to operational, compliance, AML/ATF/sanctions and conduct risk
• Facilitate and contribute to the preparation of management reporting relating to the responsibilities within the role
• Develop and maintain standardized processes, templates and guidance documentation related to the activities of the role as needed, striving for streamlining and efficiencies
• Drive effective stakeholder management and alignment through interactions with internal Technology management and team.
• Build and maintain strong relationships with key contacts within Technology and the Business Lines/Control Functions to support effective management and delivery of goals for the role.
• Ensure that the team maintains record keeping of key documentation.
• Additional accountabilities as required

Do you have the skills that will enable you to succeed in this role? We'd love to work with you if you have:

• 8+ years of progressive experience in Technology, Information/Cyber Security, IT Audit, IT Compliance, regulatory-supervision, consulting, or advisory roles. Hands-on experience working on security controls/mechanisms is an asset. Experience using COBIT, ISO, ITIL, NIST, or other specific industry frameworks. 
• Experience assessing or implementing Cyber Security and Technology Risk requirements from regulatory bodies (e.g. OSFI, NYDFS, CNBV, SBS, MAS, APRA, etc.) of key regions where Scotiabank operates.
• Sound business and technical acumen, with demonstrated agility in learning and ability to quickly become comfortable with unfamiliar businesses areas or technologies. Ability to connect programs/projects to broader organizational goals and grasp the key performance drivers of business partners.
• Must also be proactive and creative, with strong, proven ability to plan and manage competing priorities, as well as ability to recognize and appropriately handle sensitive and confidential information.
• Excellent stakeholder management and influencing / negotiation skills, capable of balancing multiple perspectives, effective at all levels. Proven ability to work both independently and within a team environment.
• Excellent communication (presentation skills, verbal and written).
• Professional Certifications such as: CISSP, CISM, CRISC, CISA are valuable assets.
• Master’s/Bachelor’s degree in science, technology, engineering, business administration or related fields.
• Spanish proficiency is a key asset

What's in it for you?

• Diversity, Equity, Inclusion & Allyship - We strive to create an inclusive culture where every employee is empowered to reach their fullest potential, respected for who they are, and are embraced through bias-free practices and inclusive values across Scotiabank. We embrace diversity and provide opportunities for all employee to learn, grow & participate through our various Employee Resource Groups (ERGs) that span across diverse gender identities, ethnicity, race, age, ability & veterans.
• Accessibility and Workplace Accommodations - We value the unique skills and experiences each individual brings to the Bank and are committed to creating and maintaining an inclusive and accessible environment for everyone. Scotiabank continues to locate, remove and prevent barriers so that we can build a diverse and inclusive environment while meeting accessibility requirements.  
• Upskilling through online courses, cross-functional development opportunities, and tuition assistance.
• Competitive Rewards program including bonus, flexible vacation, personal, sick days and benefits will start on day one.
• Community Engagement - no matter where you choose to work from; we offer opportunities for community engagement & belonging with our various programs such as hackathons, contests, Humans of Digital and much more!

Location(s):  Canada : Ontario : Toronto 

Scotiabank is a leading bank in the Americas. Guided by our purpose: "for every future", we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.  

At Scotiabank, we value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone. If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our  Recruitment team know. If you require technical assistance, please click here. Candidates must apply directly online to be considered for this role. We thank all applicants for their interest in a career at Scotiabank; however, only those candidates who are selected for an interview will be contacted.