IT Risk Specialist

Requisition ID: 228818

Thanks for your interest in ScotiaTech, Scotiabank's new and innovative Technology hub in Bogota.

Join a purpose driven winning team that promotes creativity and innovation in a fast-paced environment, where we’re always committed to results, in an inclusive, diverse, and high-performing culture.
- Purpose_

Contributes to the overall success of first line Technology as well as Internal Controls & Regulatory Management (ICRM) ensuring specific individual goals, plans, initiatives are executed / delivered in support of IT&S and the businesses strategies and objectives.
- Directly support the relevant IT Risk / ICRM Team to collaboratively assess, evaluate and quantify IT risk, design controls and assist in their implementation within the business line.

**_ Accountabilities_**:

- Support the IT Risk team in providing the 1st Line of Defense (1B) function in technology with ongoing guidance to support the implementation of, and compliance to established IT Standards, Policies, Procedures, regulatory and cyber requirements through active engagement, guidance and counselling.
- Provide support to 1st Line of Defense (1A) teams, Risk owners, to build their capability to identify, assess, mitigate and monitor risks associated with their use of information and IT systems.
- Conduct risk assessments, Risk Control Self-Assessments (RCSAs) and ensure observations, issues and outputs are recorded in enterprise tools; support IT risk control testing and monitoring and help Risk Owners with remediation plans.
- Identify, review and triage risk incidents, support root cause analyses.
- Ensure that IT Risk assessments and outputs are recorded in enterprise tools and that status is updated periodically.
- Perform gap analyses to identify non-compliance with new risk controls, frameworks, policies, risk indicators, metrics and limits and track remediation status.
- Monitor performance of KPIs and KRIs. Operationalize programs to improve KRI performance to meet banks risk tolerance.
- Support IT Risk / ICRM team to provide governance of and track SOX evidence collection.
- Advocate for IT Risk / ICRM and promote a strong risk culture in partnership with the risk owner.

**_
Reporting Relationships (Job Titles only)_**:
**Primary Manager**:
**_ (include secondary Manager if applicable)_**
- IT Risk Specialist, CCA Technology

**Direct Reports**:

- Not applicable

**Shared Reports (solid/dotted if applicable)**:

- Not applicable

**_ _**:
**_Dimensions_**:
**_
Education / Experience / Other Information (include only those that are specific to the role)_**:

- Experience with ITSM tools (ServiceNow, a plus) with strong understanding of SRE and service management principles.
- Requires expert IT Risk management experience in 1+ areas including but not limited to systems design, security, availability/stability/resiliency, disaster recovery, third party risk management, change management, release management, audit, regulatory risk, logical access, software currency. Exposure to cloud controls would be an asset.
- Strong Microsoft Excel and data analytics skills expected.
- Knowledge or understanding of Risk / Control frameworks is desirable (ITIL, ISO, COBIT, NIST).
- Degree or diploma in Computer Science, Engineering, Business Commerce or equivalent experience. Any relevant Certifications would be an asset - CISA, CRISC, CISSP, ITIL Foundation Certification in IT Service Management (ITSM), COBIT.

**_
- **

**_Working Conditions_**:

- Work in a standard office-based environment, remote or in bank buildings; your portfolio may dictate working hours aligned to other geographies and time zones.
- Travel to International locations may be required.
- Multiple and at times conflicting priorities arise with most work required under tight project’s deadlines.

**#COLGBS**

Location(s): Colombia : Bogota : Bogota

ScotiaTech is a business unit within ScotiaGBS, a Scotiabank Group company located in Bogota, Colombia. The ScotiaTech hub was created to support different technology systems and processes of the Bank. We offer an inclusive, positive work environment, and competitive benefits.