BUSINESS RISK MANAGER QR30

Bebeerisk


Job Description: We are seeking a skilled professional to contribute to the success of our Global Technology Control Testing / IT Risk function in Canada. The successful candidate will be responsible for ensuring specific individual goals, plans, and initiatives are executed and delivered in support of the team's business strategies and objectives. The ideal candidate will have experience in risk management roles across any line of defense and possess knowledge of security principles, cloud security, and IT processes. They will also have excellent communication skills and the ability to work effectively with peers and stakeholders. Key responsibilities include testing design and operating effectiveness attributes for technology controls, conducting IT general controls and automated control walkthroughs, and assessing controls for effectiveness. The successful candidate will also identify, assess, prioritize, and report on significant IT risks for IT and aligned business areas. - Champions a customer-focused culture to deepen client relationships and leverage broader Bank relationships, systems, and knowledge. - Assists Risk Owners in adhering to policies, frameworks, standards, and guidelines through active engagement and guidance. - Acts as a primary liaison between the risk owners and other risk groups to lead the facilitation and execution of risk management activities. - Tests design and operating effectiveness attributes for technology controls - Conducts IT General controls and automated control walkthroughs and assesses controls for effectiveness. - Identifies, assesses, prioritizes, and reports on significant IT risks for IT and aligned business areas. - Ensures findings are input in the enterprise Global Issue Management system and in full compliance of all policies and common standards, including the IT Risk Management Policy and Framework. - Supports development of monitoring tools to evaluate the design and operating effectiveness of the key controls in the Business. Monitoring will include reviewing key indicators, sample testing and conducting thematic reviews. - Assists documentation and monitoring the progress of remedial actions for issues identified through Technology Control testing and by others, including Internal Audit, Compliance, regulators, and management self-identified issues. - Collaborates with IT Risk Senior Managers for other business units to improve risk management practices across the enterprise. - Supports ad-hoc, special, and/or focused reviews as necessary, as well as other duties and projects as assigned. - Understand how the Bank's risk appetite and risk culture should be incorporate into in day-to-day activities and decisions. - Actively pursues effective and efficient operations of his/her respective areas in accordance with Scotiabank's Values, its Code of Conduct and the Global Sales Principles, while ensuring the adequacy, adherence to and effectiveness of day-to-day business controls to meet obligations with respect to operational, compliance, AML/ATF/sanctions and conduct risk. - Champions a high-performance environment and contributes to an inclusive work environment. Dimensions: The scope of this role covers related high-risk Regulatory Compliance and Cybersecurity Control Testing needs of enterprise-wide systems and applications, and other Technology Domain Services testing activities, across the enterprise. Measurement of success in this role includes Key Performance Indicators (KPIs) around delivering on goals, testing activities, program enhancements.

trabajosonline.net © 2017–2021
Más información