Is this role right for you? In this role, you will: Regulatory & Audit Readiness Coordinate and prepare Cyber & IT Risk responses, briefing materials, evidence and other deliverables for regulatory examinations and engagements.

Work with subject matter experts and stakeholders to ensure regulatory materials are clear, accurate, complete, internally consistent and supported by appropriate evidence.

Support Cyber & IT Risk engagement with Internal Audit, including responses to observations and management actions.

Review regulatory and audit materials through a second-line risk lens and identify gaps, inconsistencies or areas requiring further analysis or challenge.

Anticipate upcoming requirements and ensure Cyber & IT Risk is well prepared for regulatory and audit engagements.

Issues, Remediation & Commitments Drive disciplined management of Cyber & IT Risk-owned audit issues, regulatory commitments, remediation activities and other priority actions.

Maintain explicit visibility of milestones, owners, dependencies, evidence requirements and target dates.

Proactively follow up on actions and identify potential delivery, quality or dependency risks before commitments are at risk.

Review remediation plans and closure evidence to assess whether actions address the underlying risk and support the intended outcome.

Provide clear reporting and timely escalation of issues requiring management attention or intervention.

Second-Line Risk Oversight & Challenge Provide credible second-line review and challenge across Cyber and Technology Risk matters, including regulatory responses, audit observations, remediation plans, risk assessments, policies and standards, and issue closure.

Apply sound risk judgment to identify gaps,



assumptions and areas requiring further analysis or challenge.

Develop clear risk perspectives and recommendations to support senior management decision-making.

Work constructively with first-line partners and subject matter experts to drive practical, risk-informed outcomes.

Identify themes across issues, audit findings, regulatory matters and other risk information that may indicate broader or emerging concerns.

Strategic Execution Take ownership of complex or ambiguous assignments, establish a clear path forward and drive work through to completion with minimal direction.

Anticipate upcoming priorities, deadlines, dependencies and decision points and proactively address them.

Coordinate across teams to obtain required input, resolve dependencies and maintain momentum.

Prepare clear, concise and executive-ready briefings, presentations, risk perspectives and decision materials.

Identify opportunities to strengthen Cyber & IT Risk governance, reporting and ways of working.

Do you have the skills that will enable you to succeed? We’d love to work with you if you have: 7+ years of relevant experience in Cyber Security, Technology Risk, IT Risk, audit, regulatory or related disciplines, or equivalent demonstrated expertise.

Broad or deep knowledge across key Cyber and Technology Risk domains, with the ability to understand technical issues,



assess risk implications and engage effectively with subject matter experts.

Experience supporting regulatory examinations, Internal Audit engagements, issue remediation or significant risk-management commitments.

Demonstrated ability to develop high-quality materials for senior executives, regulators, auditors or governance forums.

Strong understanding of first-line management, second-line risk oversight and Internal Audit responsibilities.

Experience within a large, complex, regulated financial institution is preferred.

Relevant professional qualifications such as CISSP, CISM, CRISC or CISA are considered an asset.

Exceptional organization, attention to detail and follow-through.

Strong bias toward action and demonstrated ability to work independently.

Ability to bring structure to ambiguous or complex assignments.

Ability to manage multiple priorities and deadlines without losing sight of quality.

Strong analytical thinking, risk judgment and constructive challenge.

Excellent written and verbal communication.

Ability to simplify complex Cyber and IT matters for executives, regulators and non-technical audiences.

Strong stakeholder management and ability to drive action without direct authority.

Ability to anticipate requirements, identify potential problems and escalate appropriately.

What’s in it for you? An inclusive & collaborative working environment that encourages creativity, curiosity, and celebrates success! We offer a competitive rewards package: Performance bonus, Employee Share Ownership Program, and Pension Plan Matching, Health Benefits from day one! Your career matters! You will have access to career development and progression opportunities.

📌 Senior Manager, Cyber Security and IT Risk (Toronto)
🏢 Scotiabank
📍 Toronto