Job Description

Requisition ID: 178449

Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.

The Team

Enterprise Advisory Services is responsible for providing advisory services to business lines, subsidiaries and affiliates enabling the achievement of the Bank\'s Information Security Policy. A Senior Information Security Advisor (the role) provides advisory services to assist in the development and support of sound security strategies and secure control processes to protect the Bank\'s information and data resources.

The role:

A Senior Information Security Advisor\'s role includes:

• Acting as a central point of reference and core competency for Information Security. Assisting in the classification and protection of data resources by providing guidance on secure and cost effective implementation of Bank\'s security policies and standards.
• Representing Information Security in projects, initiatives, mergers and acquisitions. Working with business lines to develop sound security strategic and tactical plans towards the reliable implementation of consistent and secure control processes to protect the Bank. Drive initiatives and support business functions to assess security risks and to make informed decisions to protect information assets.
• Providing guidance to design, develop and implement sound risk management controls in accordance with Bank\'s standards that assure the Bank\'s compliance with industry regulations. Keeping informed and well versed on financial industry regulations demands in different regions based on practical experience.
• Pursuing security and control process improvements to advance security compliance and improve internal processes.

Is this role right for you?

A Senior Information Security Advisor\'s accountability includes:

• Participate in initiatives and projects driven by various business lines. Guide project and delivery managers to design and establish sound information security practices, facilitating key artifacts such as security desgin documents, threat/risk assessments and data classifications with the owner to ensure that risks are identified and effectively managed. Where required by risk, lead due diligence reviews over third party outsourcing partners to ensure that their security posture aligns with the Bank and industry best practice. Work with the relationship owner and the third party to create and track an action plan for remediation of issues.
• Acting as a central point of reference and core competency for Information Security, providing first line subject matter expert advise on classification and protection of data through Bank\'s information security standards, policies and processes, and industry best practices.
• Liaise with internal and external security teams and business lines to develop sound security strategic and tactical plans towards the reliable implementation of consistent and secure control processes to protect the Bank.
• Work with our business line partners to assess and ensure compliance to the Bank standards. Escalating risk through appropriate channels.

#LI-Hybrid #Cyberatscotia

Location(s): Canada : Ontario : Toronto

Scotiabank is a leading bank in the Americas. Guided by our purpose: "for every future", we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.

At Scotiabank, we value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone. If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our Recruitment team know. If you require technical assistance, please . Candidates must apply directly online to be considered for this role. We thank all applicants for their interest in a career at Scotiabank; however, only those candidates who are selected for an interview will be contacted.

Scotiabank