Senior Manager, Incident Management

ID de la solicitud: 231346

Gracias por tu interés en ScotiaGBS, el mejor campus de Bogotá.

Únete a un equipo ganador con un propósito claro, comprometido con el logro de resultados en un entorno inclusivo y de alto desempeño.

**_
Purpose_**

In the role of Senior Manager, Fraud Incident Management, you’re responsible for building, managing, and enhancing Scotiabank’s capability to identify and respond to account-level threats and attacks at scale. This includes incident triage, threat-actor journey mapping, containment, remediation, and identification of root cause contributors. In addition to leading and growing the IB team of incident response experts, you represent the team externally within industry groups. You regularly connect with your peers and leadership in Fraud Threat Management to ensure optimization across functions. You’re calm under pressure and draw on your years of experience and knowledge of industry best practice to inspire confidence with your team and stakeholders inside and beyond the Bank as you keep our customers and the Bank safe. Your team maintains a methodology and systematic solutions to managing critical fraud incidents and cyber-fraud attacks across Mexico, Colombia, Peru, Chile, Central America, Uruguay, and the US and Caribbean, and, where necessary, provide support to some of the largest Canadian incidents.

**Accountabilities**
- Lead the response to account-level attacks targeting any of Scotiabank’s products and digital properties across all international countries including the US. Regularly review and incorporate lessons learned.
- Produce and provide timely incident communications for a variety of audiences including senior stakeholders to ensure awareness and appropriate levels of engagement as part of response activities.
- Provide guidance and recommendations to your leadership, peers, and stakeholders across the enterprise to support effective decision-making during incident response, post-incident, and prevention phases.
- Create conditions that encourage the identification of systemic issues, reoccurring problems, and identified threats/vulnerabilities to our Fraud Problem Management function. Ensure these and other root cause contributors are captured within post-incident reviews.
- Act as a SME resource to our Fraud Problem Management team to support appropriate and effective resolutions for identified problems.
- Manage and drive improvement for incident management KPIs including mean-time-to-detect (MTTD), mean-time-to-containment (MTTC), mean-time-to-remediation (MTTR) as measured by event type and severity.
- Identify and recommend changes to cyber-fraud monitoring and alerts that your team receives to ensure ongoing improvements to our early-detection efforts.
- Maintain awareness of legislative and regulatory changes that affect cyber-fraud incident management. Prepare briefing notes, reports, and other content associated with regulator interactions.
- Conduct work item quality reviews and provide required coaching to ensure adherence to our incident protocol, incident communication matrix, service-level commitments, and all associated playbooks.
Regularly recognize and reinforce high-quality work and behaviours individually and in a team setting where appropriate.
Support the development of and maintain comprehensive incident management playbooks outlining processes, tools, data, and technology requirements, as well as communications protocols and cross-functional interaction models with key internal partners (ex. IS&C, Crisis Management, Corporate Security, and technology).
- Contribute to and execute against the cyber-fraud team roadmap that ensures the team is equipped with the expertise, procedures, data, technology, and relationships they need to be successful in preventing, early detection, and response to account-level attacks.
- Work as a strategic partner and build resilience and capability within Fraud Management teams and business lines that increase their preparation for, and ability to manage potential incidents that may impact their operations and customers.
- Support vendor relationships associated with cyber-fraud red teaming & incident response.
- Foster and maintain ongoing team awareness of the cyber-fraud threat landscape, including through certification, continuing professional education (CPE), industry group participation, threat intelligence feeds, and direct research.
- Contribute to the overall success of the Global Fraud Management function, ensuring specific individual goals, plans and initiatives are delivered in support of the team’s business strategies and objectives. Ensures all activities conducted in accordance with Scotiabank’s values and Code of Conduct and are in compliance with governing regulation and internal policies, procedures, and standards.
- Build and maintain a high-performance environment with a people strategy that attracts, retains, develops and motivates the team by fostering curiosity and an inclusiv