• Lead and drive a customer focused culture at all levels of their team to deepen client relationships and leverage broader Bank relationships, systems and knowledge.
• Develops and maintains effective communication and engagement with internal and external stakeholders (globally and locally) and the U.S. CISO, including establishing routine touchpoints and appropriate handling of conflicts and issue resolution, and active involvement as a non-voting member on appropriate committees and working groups.
• Builds a strong relationship with the various regulators in the U.S., assesses emerging regulatory expectations and guidelines, and works to continuously strengthen the U.S. Audit Program.
• Oversees COE activities for U.S. Cyber related audits and audit activity (e.g., issues, continuous monitoring, etc).
• Develop and maintain U.S. Cyber Audit Strategy in alignment to global audit strategy and Cyber/IT Audit COEs strategy and collaborate with other audit teams on strategy execution.
• Establishes and leads the audit strategy, universe, risk assessment and plan over U.S. Cyber Audit activities.
• Develop and implement a flexible Annual Audit Plan using an appropriate risk-based methodology that meet U.S. and global regulatory requirements, frameworks/guidance and expectations (FRB, DFS, FFIEC, NIST, etc).
• Responsible for Cyber Risk Remediation Program and validation of implemented controls and processes.
• Contribute to and take the lead in preparing and presenting audit reports and results to Management Committee(s), regulators / examinations, and stakeholder meetings.
• Identifies systemic/emerging issues and/or strategic changes planned/undertaken by the auditee that will impact the audit plan including review of business/strategic plans, review and update the Risk Assessment Database for entities assigned, attend periodic meetings with key management officers to understand changes and new business initiatives and review Key Performance Indicators.
• Reviews plans against market conditions and re-assess and provide new ideas on an ongoing basis with respect to processes/controls to be audited.
• Directs the planning of thematic audits or assigned areas by ensuring the scope and extent of work is in accordance with the approved plan, timing and budget are reasonable, procedures are efficient, appropriate resources are assigned, and risks understood.
• Oversees and coordinates development of Detailed Audit Programs (DAPs) as required.
• Supervises staff in the audit and execution of assignments including the appropriate nature and extent of audit coverage.
• Responsible for the ongoing assessment of the safety and soundness of cyber/technology processes, policies and procedures within assigned products/portfolios/business lines, including key performance indicators, changes, provisions, etc. Responsible for ensuring that the processes adequately support meets regulatory expectation, business strategies, plans and initiatives.
• Ensures audit results are gathered, determine the root cause of the problem and the associated impact and report accordingly. Ensures audit reports are written to a consistent high standard and are finalized within established department metrics.
• Monitors and follow-up for corrective action/progress against any reported issues. Ensure relevant information that impacts other audit function areas is shared.
• Carry out specific projects or investigations of a complex and/or confidential nature. Plan, document and seek agreement in advance to the project approach and confirm conclusions upon completion in writing.
• Ensure Scotiabank standards and the Institute of Internal Auditors (IIA) Code of Ethics are maintained in completion of all assignments.
• Understand how the Bank’s risk appetite and risk culture should be considered in day-to-day activities and decisions.
• Build a high-performance environment and implement a people strategy that attracts, retains, develops, and motivates the team for continuous learning and improvement by fostering an inclusive work environment; communicating vision/strategy; coaching and supporting development goals; and managing succession and development planning for the team.
• Creates an environment in which his/her team pursues effective and efficient operations of his/her respective areas in accordance with Scotiabank’s Values, its Code of Conduct and the Global Sales Principles, while ensuring the adequacy, adherence to and effectiveness of day-to-day business controls to meet obligations with respect to operational, compliance, AML/ATF/sanctions and conduct risk.
• Be proactive in identifying and owning responsibility for leading change within Audit (U.S. and Globally).
• Manages the development of staff by establishing and monitoring the execution of goals and development plans and conducting periodic performance assessments. Provides ongoing direction and coaching to staff and assists with team development through training and monitoring.
• Manage recruiting, interviewing, selection, and onboarding of audit staff.
• Manage self-development by/through confirming job expectations and develops and manages his/her personal development plan and identifying mentors/coaches.

Required Qualifications

• University degree (graduate level) in technology, business or other relevant area
• IT Audit/Information Security professional designation (CISA, CISSP, Cyber Certified), experience with FFIEC, NIST, ITIL, etc.
• Minimum of 12 years Technology experience.
• In-depth knowledge of IT and Cyber risk and related processes, governance framework, methodology, Risk management and applicable regulatory requirement.
• Demonstrated strong leadership in being strategic, coaching and developing talent.
• Ability to build strong relationships with the various regulators in the U.S., assess emerging regulatory expectations and guidelines, and continuously strengthen the U.S. Cyber Audit Program.
• Experience in working in a global bank, with global Audit counterparts and stakeholders, matrix reporting lines and in a fast paced and changing environment.

Preferred Qualifications

• Responsible for direct/indirect reports.

If your experience is closely related but doesn’t align perfectly with every qualification, we do encourage you to apply - you might be the right candidate for this or other roles at Scotiabank!

At Scotiabank, every employee is empowered to reach their fullest potential, respected for who they are and, embraced for their differences. That’s why we work to grow and diversify talent and engage employees in a performance-oriented culture.

What's in it for you?

Scotiabank wants you to be able to bring your best self to work – and life, every day. With a focus on holistic well-being, our many flexible benefit programs are designed to help support your unique family, financial, physical, mental, and social health needs.

Location(s): United States : New York : New York City

Scotiabank is a leading bank in the Americas. Guided by our purpose: "for every future", we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.

At Scotiabank, we value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone. If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our Recruitment team know. If you require technical assistance, please click here. Candidates must apply directly online to be considered for this role. We thank all applicants for their interest in a career at Scotiabank; however, only those candidates who are selected for an interview will be contacted.