Manager, IT Risk

Requisition ID: 190001

Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.

Purpose
- Directly support the CIO, Asia Pacific to collaboratively assess, analyze and quantify IT risk, design controls and assist with implementation. The Manager will be assigned to primarily support IT risk related activities for those CIO and enterprise technology portfolios where priorities will be identified.
- Assist the CIO, Asia Pacific with the IT Risk Function in the Asia Pacific region to execute on the key elements of Technology risk assessments and ensure that governance (i.e. plan, process, report) processes are in place and IT Risk is being managed and remediated.
- Build robust IT Risk related controls and processes and ensure that controls are maintained and adhered to in the assigned IT portfolios.

Accountabilities
- Work with the IT Leads in APAC region and the IT&S Organization: Identify, assess, prioritize and report on material IT risks for IT and aligned business areas. This will require working with various Risk Advisors across the organization.
- Conduct detailed IT Risk assessments and ensure that IT Risk assessments and outputs are recorded in enterprise tools and are in full compliance of defined policies and common standards, including the IT Risk Management Policy and Framework.
- Perform IT Risk control testing and monitoring (as applicable) and ensure that testing activities are conducted in compliance with governing regulations, internal policies and procedures.
- Identify pervasive IT risk issues or issues that are common across the landscape and help implement preventative controls across IT&S.
- Partner with other risk groups to assess, implement and communicate new/updated risk controls, frameworks, policies, risk indicators, metrics and limits.
- Ensure implementation of a strong IT risk culture in partnership with various IT Risk Advisors and Risk Owners.
- Support development of tools and technology to support the management of IT risk across the Bank.
- Perform Risk Control Self Assessments (RCSA), Enterprise Compliance Risk Management (eCRM) Library, Privacy (GDPR), and Information/Cyber Security risk assessments.

Skills and experience
- A strong knowledge of the Asia Pacific regulatory and compliance environment and assess impact of regulatory initiatives from local regulatory bodies such as MAS, HKMA and others on risk appetite and frameworks.
- Requires expert IT Risk management experience; systems design, security, availability, disaster recovery, third party risk management, change management, release management. Exposure to cloud controls and third-party management controls would be an asset.
- Good knowledge of multiple global banking businesses including related systems and procedures.
- Good ability to balance competing or conflicting goals of various departments and stakeholders which requires a mature, diplomatic approach and highly developed negotiation and influencing skills.
- Portfolio management, leadership, and IT governance experience, exhibiting outstanding drive and problem-solving skills, supported by well-developed analytical competencies.
- Strong communication, facilitation and presentation skills.

Location(s): Singapore : Singapore : Singapore

Scotiabank is a leading bank in the Americas. Guided by our purpose: "for every future", we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.