Requisition ID: 266801
The Senior Manager, Cloud Security Engineering is responsible for providing strong leadership to a dedicated team of engineers who support the Cloud Security toolsets. This team is charged with the design and implementation of enterprise-level security platforms, ensuring robust protection for the bank's technology infrastructure.
In this role, the Senior Manager leads a team of platform engineers, guiding them in the execution and delivery of the enterprise Cloud Security product strategy. This involves setting clear objectives, providing mentorship, and ensuring that platform engineering initiatives align with the broader strategic goals of the organization.
The Senior Manager facilitates collaboration across different departments with the aim of making strategic platform engineering decisions. Emphasis is placed on technical design and seamless integration with DevOps practices. This cross-functional approach ensures that security solutions are embedded into the bank's development and operational workflows.
Outstanding verbal and written communication skills are essential for this role. The Senior Manager must be able to distill and convey complex technical information to executive management, including details related to risks, resource utilization, and the impact on project roadmaps. Effective communication ensures alignment among stakeholders and supports informed decision-making.
It is imperative that all activities undertaken in this role comply with applicable governing regulations, as well as internal policies and procedures. The Senior Manager is responsible for ensuring that the team's work adheres to these standards, thereby supporting the bank's commitment to operational integrity and regulatory compliance.
Is this role right for you? In this role, you will:- Lead and manage a team of Cloud Security Engineers to implement and tune Cloud Native Application Protection Platforms, Cloud Security Posture Management and Cloud Workload Protection tools to all the cloud environments in the organization.
- Lead and Implement security controls for containerized environments, ensuring secure container registries, runtime protection, and service mesh security.
- Lead and Implement security controls for Enterprise CI/CD pipelines.
- Translate high-level information security policies and business objectives into actionable engineering roadmaps
- Closely collaborate with Product, Architecture and operations teams to ensure implementation of the bank's enterprise security strategy.
- Manage platform implementation and project deliverables, including communicating clearly to stakeholders, ability to define critical chain of events to execute a project successfully, and strong project management skills.
- Work closely with their Director to facilitate cross-department strategic decisions and work with leaders in defining and building executive communication.
- Manage resource allocation, estimation for new initiatives, assessment of incoming work, development and maintenance of a roadmap for the team.
- Deliver projects to remediate IT Risk, Internal Audit and Regulatory (including OSFI) associated with security platforms.
- Build and maintain stakeholder buy-in and relationships across IS&C and IT business line teams.
- Understand how the Bank's risk appetite and risk culture should be considered in day-to-day activities and decisions.
- Actively pursues effective and efficient operations of their respective areas in accordance with Scotiabank's Values, its Code of Conduct and the Global Sales Principles, while ensuring the adequacy, adherence to and effectiveness of day-to-day business controls to meet obligations with respect to operational, compliance, AML/ATF/sanctions and conduct risk.
- Champions a high-performance environment using a coaching mindset, behaviors and embracing Scotiabank's values and contributing to an inclusive work environment.
Do you have the skills that will enable you to succeed in this role? We'd love to work with you if you have:- Minimum 8 years of IT/Security work experience, with at least 3 years leading a team on securing AWS, Azure or GCP.
- 2+ years of experience directly managing or leading engineering teams.
- Proficiency in scripting/programming (Python, Bash, GO) and Infrastructure as Code (Terraform)
- Preferred deep understanding of Banking (preferred Scotiabank) process, procedures and cross-functional engagement.
- Excellent verbal and written communication, negotiating and interpersonal skills with the ability to summarize material for senior management.
- Assist senior management with budgeting, estimations, and resource planning.
- Excellent people management, coaching and leadership skills and experience.
- Good understanding of Security and IT service delivery and a solid understanding of mapping stakeholder requirements to results.
- Experience with and knowledge of project methodologies such as Waterfall, Agile and DevOps in delivering large scale solutions in an enterprise environment.
- Broad understanding of Information Security and Technology domains with focus on the Financial Industry will be an asset.
- Strong knowledge of cloud development technologies and tools such as Containers, VMs and Micro services with proven experience with a cloud provider (Google Cloud, Microsoft Azure).
- Experience working with Internal Audit and Regulatory Assessments (e.g., SOX, OSFI, CDIC, etc.) and addressing compliance gaps.
- Experience collaborating with various Scotiabank engineering teams such as (but not limited too) Scotia Digital, GTS, IPM and IS&C to foster a common goal and solve complex problems.
- Undergraduate Degree in Computer Science, Diploma or technical equivalent experience is required.
- Nice to have (but not required) one or more: CISSP, CCSK or ITIL.
- Nice to have (but not required) fluency in Spanish
What's in it for you?- Diversity, Equity, Inclusion & Allyship - We strive to create an inclusive culture where every employee is empowered to reach their fullest potential, respected for who they are, and are embraced through bias-free practices and inclusive values across Scotiabank. We embrace diversity and provide opportunities for all employee to learn, grow & participate through our various Employee Resource Groups (ERGs) that span across diverse gender identities, ethnicity, race, age, ability & veterans.
- Accessibility and Workplace Accommodations - We value the unique skills and experiences each individual brings to the Bank and are committed to creating and maintaining an inclusive and accessible environment for everyone. Scotiabank continues to locate, remove and prevent barriers so that we can build a diverse and inclusive environment while meeting accessibility requirements.
- Upskilling through online courses, cross-functional development opportunities, and tuition assistance.
- Competitive Rewards program including bonus, flexible vacation, personal, sick days and benefits will start on day one.
- Community Engagement - no matter where you choose to work from; we offer opportunities for community engagement & belonging with our various programs such as hackathons, contests, Humans of Digital and much more!
Location(s): Canada : Ontario : Toronto
