Controls Testing Engineer Lead

Requisition ID: 244155

Thanks for your interest in ScotiaTech, Scotiabank's new and innovative Technology hub in Bogota.

Join a purpose driven winning team that promotes creativity and innovation in a fast-paced environment, where we're always committed to results, in an inclusive, diverse, and high-performing culture.

Purpose
Global Technology Control Testing team plays an important role in the Bank's Three Lines of Defense Framework, providing First Line of Defense for the Enterprise on all technology risk domains, including Cyber Security, Data Privacy, Software Lifecycle Management, Capacity, Incident Management, Disaster and Backup Recovery, Third Party Management, Project Management, and Audit & Regulatory issue remediations.

Senior Manager, Technology Control Testing directly supports the Director Global Testing to collaboratively assess high risk processes across business lines and manages the execution of the control test exercise(s). This role is part of a strategic and comprehensive IT Risk Management Function within the Global Technology Control Testing COE and ensures design and implementation in accordance with regulatory expectations, risk appetite, organizational risk practices and evolving business practices.

The role includes significant coordination and engagement with peers across all business lines and technology functions. This includes 1st, 2nd, and 3rd lines of defense for Technology in the execution of risk management activities, inclusive of regular updates, formal reporting and managing remediation commitments identified (e.g. audit findings).

Accountabilities

• Champions a customer focused culture to deepen client relationships and leverage broader Bank relationships, systems, and knowledge.
• Leads IT General controls and automated control walkthroughs and assess controls for effectiveness
• Advises and supports risk owners in day to day risk management activities and execution. Assists risk owners in adhering to policies, frameworks, standards and guidelines through active engagement, guidance, and counselling. Advises on the design and implementation of controls, and remediation plans to mitigate risk.
• Identifies, assesses, prioritizes, and reports on material IT risks for IT and aligned business areas. This will require working with equivalent Risk Advisors in various business areas.
• Lead internal control reviews of high-risk processes including procedure testing, establishing test plans and test scripts, providing recommendations, providing feedback, and reporting to the Head of Technology COE.
• Ensures implementation of a strong IT risk culture in partnership with the risk owners and other control functions.
• Oversees audit issue remediation to meet the annual enterprise target, and SOX control testing across the portfolio by working with Internal and External Audit.
• Monitor effectiveness of portfolio impacting governance processes such as change management, project management and architecture reviews, for enforcing control requirements. Collaborates with IT Risk Senior Managers for other business units to improve risk management practices across the enterprise. Provides on-going coaching and guidance to less experienced GO Technology COE staff to ensure there is a consistent understanding of the overall risk program, KRIs, monitoring plan and governance structure.

Dimensions
Scope Of Role Covers
Related high-risk Regulatory Compliance and Cybersecurity controls monitoring needs of enterprise-wide (all business line) systems and applications, and other Technology Domain Services testing and reporting activities, across the enterprise.

Access and training on multiple systems

Extensive familiarity with Scotiabank policies and procedures, Technology & Risk Management standards

Measurement Of Success In The Role Include
Key Performance Indicators (KPIs) around delivering on goals, control monitoring activities, program enhancements/ improvements, contribution to a high-performing team, etc.

Education
Functional Competencies

• Exceptional planning and analytical skills, ability to focus on critical issues
• Ability to work collaboratively with teams, and manage and grow team members, across multiple locations in multiple countries.
• Ability to develop strong working relationships with partners/stakeholders, and influence change with numerous, cross-functional teams

Education/Experience

• 5+ years of experience in the IT Risk and /or Technology Operations
• Experience with the following is recommended: COBIT, CIS, and NIST frameworks. Exposure to SOX requirements
• Need experience in a wide area of risk controls such as infrastructure risk, application risk. PM reporting/status skills to prepare status of IT control framework to senior management
• Knowledge and experience in at least 5 technology disciplines, such as software development, API management, system design, information security, technology resilience, technology third party management, cloud computing, midrange and mainframe computing, project management, incident - problem - change management, networks and disaster recovery.

Working Conditions
Work in a standard office-based environment; non-standard hours are a common occurrence. Located primarily at the Tahoe Hub, however, travel may be required within Canada.

Location(s): Colombia : Bogota : Bogota

ScotiaTech is a business unit within ScotiaGBS, a Scotiabank Group company located in Bogota, Colombia. The ScotiaTech hub was created to support different technology systems and processes of the Bank. We offer an inclusive, positive work environment, and competitive benefits.

At ScotiaTech, we value the unique skills and experiences each individual brings and are committed to creating and maintaining an inclusive and accessible environment for everyone. Candidates must apply directly online to be considered for this role. We thank all applicants for their interest in a career at ScotiaTech; however, only those candidates who are selected for an interview will be contacted.