Senior Information Security Advisor

Job title: Senior Information Security Advisor

Job description: Requisition ID: 103322

Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.

The Team
Scotiabank’s Enterprise Advisory Services is responsible for providing advisory services to business lines, subsidiaries and affiliates enabling the achievement of the Bank’s Information Security.

The role
The Senior Information Security Advisor for TPRM (Third Party Risk Management) Security provides guidance to business lines to ensure design, development and implementation of projects and initiatives are in accordance with the Bank’s Information Security Standards and in compliance with industry regulations. The role will assist in the classification of data and assess information security risk in order for business functions to make informed decisions to protect information assets.

Is this role right for you?

• You have 5+ years of hands-on technical working experience in performing threat risk assessments on complex applications and network environments.
• You have 5+ years of hands-on technical working experience with security controls/mechanisms.
• You have used industry leading productivity tools to produce quantitative/qualitative reports; data flow diagrams & visual presentations.
• You are results focused with ability to manage multiple assignments concurrently.
• You are able to adapt quickly to changing priorities.
• You can manage assignments to completion with minimal supervision, ensuring line management is aware of potential issues.
• You are able to mentor and coach partner team members and junior security staff.

Do you have the skills that will enable you to succeed in this role?

• Strong subject matter expertise with Third Party Risk Management Information Security practices related to supplier onboarding, continuous monitoring, and issue management.
• Solid understanding and experience with security controls/mechanisms and threat/risk assessment techniques pertaining to complex data, application and network environments.
• Strong verbal and written communication skills in English with excellent individual project management and tracking skills.
• Strong knowledge of regulatory guidelines related to the financial services industry (OSFI B10, NYDFS NYCCR 500, etc.), including knowledge of industry standards/frameworks related to Information Security (ISO27001/27002, NIST, GDPR, etc.).
• Excellent relationship management and negotiation skills to assist in the communication and finalization of the Bank’s security requirements, contractual obligations and standards to internal teams and third party relationships.
• Strong knowledge in one, or more of the following security domains:

• Cloud security concepts, architecture and controls
• Cryptographic concepts leveraged in modern applications and systems
• Security features and best practices of operating systems
• Application security practices and Secure Software Development Life Cycle
• Identity & Access Management, PKI,
• Prevention of advanced threats and techniques
• Independent security reviews and audits (SOC2 Type 2 reports, security assessments)
• Database technologies (Oracle, DB2, Sybase, SQL Server, etc.)
• Network security components of firewalls, routers, gateways
• Expertise in RFP process, Agile, Lean, Rapid Labs and other accelerated project frameworks
• Post-secondary education in Computer Science or in a related field.
• Security Certifications (CISSP, CISM, CCSP, CRISC etc.) would be an asset(s).

What’s in it for you?

• You will be part of an information security team that has a global enterprise focus, working on exciting new initiatives.
• Our primary office in Scarborough is freshly renovated with a design focus on enabling collaboration through both environment and technology.
• Onsite cafeteria plus complimentary hot beverage stations in the workplace.
• Minutes by TTC bus from Warden subway station on Line 2.
• Free employee shuttle service connecting the IT campus with nearby GO stations.
• Free onsite & offsite employee parking with charging stations for electric vehicles onsite
• Dress codes don’t apply here, being comfortable does.
• We provide you with the tools and technology needed to create beautiful customer experiences.
• We have an inclusive and collaborative working environment that encourages creativity, curiosity, and celebrates success!
• You’ll get to work with and learn from diverse industry leaders, who have hailed from top technology companies around the world.
• We foster an environment of innovation and continuous learning.
• We offer a competitive total rewards package, including a performance bonus, company matching programs (pension & Employee Share Ownership), generous vacation; health/medical/wellness benefits; employee banking privileges.

Location(s): Canada : Ontario : Scarborough

Scotiabank is a leading bank in the Americas. Guided by our purpose: ”for every future”, we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.

At Scotiabank, we value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone. If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our Recruitment team know. If you require technical assistance, please click here. Candidates must apply directly online to be considered for this role. We thank all applicants for their interest in a career at Scotiabank; however, only those candidates who are selected for an interview will be contacted.

Company: Scotiabank

Expected salary:

Location: Scarborough, ON

Job date: Sat, 24 Apr 2021 22:41:11 GMT