it risk manager

Peraton

<div>About Peraton 
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we're keeping people around the world safe and secure. 
 
Program Overview 
 
About The RoleJoin Peraton and Shape the Future of Air Traffic Management 
At Peraton, we advance the safety, efficiency, and modernization of the National Airspace System (NAS) through the FAA's Business, National Airspace, and Technical Computing Services (BNATCS) contract. As a trusted partner to the Federal Aviation Administration, we deliver the systems and services that keep our nation's skies safe and connected. 
 
We're looking for innovative professionals who thrive in mission-critical environments and are passionate about shaping the future of air traffic management. Here, you won't just support the mission - you'll define it, working alongside leaders in aviation, engineering, data science, and systems integration. 
 
About the Role: Risk Manager - TELECOM 
Location: Chantilly, VA 
 
As a Risk Manager on our TELECOM team, you will play a critical role in identifying, assessing, and mitigating risks across IT and telecom programs. You'll maintain risk registers, conduct impact analyses, and support governance reviews, ensuring that our programs operate smoothly and securely. You will collaborate with stakeholders to implement risk controls and continuously monitor their effectiveness - keeping our systems resilient and our skies safe. 
 
What You'll Do: 
 
<ul><li>Identify, assess, and mitigate risks across IT and telecom programs.</li></ul> 
<ul><li>Maintain and update risk registers to track and prioritize potential issues.</li></ul> 
<ul><li>Conduct impact analyses and support governance reviews.</li></ul> 
<ul><li>Collaborate with stakeholders to implement effective risk controls and monitor outcomes.</li></ul> 
<ul><li>Ensure compliance with FAA and Peraton standards, supporting mission-critical initiatives.</li></ul> 

What We're Looking For: 
 
<ul><li>Strong analytical and problem-solving skills.</li></ul> 
<ul><li>Experience in IT, telecom, or risk management roles.</li></ul> 
<ul><li>Ability to communicate risks and mitigation strategies clearly to stakeholders.</li></ul> 
<ul><li>Passion for mission-driven work and improving national infrastructure.</li></ul> 

Why Peraton? 
At Peraton, your work has real-world impact. You'll be part of a team that keeps our nation's airspace safe and efficient, working on complex, cutting-edge systems. We offer opportunities for career growth, collaboration, and innovation in a supportive, mission-focused environment. 
 
If you're ready to take your career to new heights and make a tangible difference in aviation, we want you on our team. 
 
QualificationsRequired Qualifications: 
<ul><li>Experience: 5+ years in risk management, with a track record of identifying, assessing, and mitigating risks.</li></ul> 
<ul><li>A bachelor's degree in a relevant field OR an additional 4 years of experience is required</li><li>Skills &amp; Expertise:</li></ul> 
<ul><li>Advanced Excel for data analysis, reporting, and visualization.</li></ul> 
<ul><li>Strong ability to interpret complex data and turn it into actionable insights.</li></ul> 
<ul><li>Proven experience designing efficient workflows and optimizing processes for compliance and performance.</li></ul> 
<ul><li>Clearance: Ability to obtain a Public Trust.</li></ul> 

Preferred: 
 
<ul><li>Certifications: PMI-RMP or CRISC.</li></ul> 

SCA / Union / Intern Rate or Range 
 
Details 
Target Salary Range: $80,000 - $128,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
 
 
Benefits Statement: Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
 
 
Application Duration Statement: The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.
 
 
EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.</div>

Risk Manager - TELECOM

Minds United

<div>
 Full Time
 
 
 
 
 Job Purpose
 
 
 
 
 The IT Compliance &amp; Risk Lead is responsible for the assessment of technology\ vendor risks and control effectiveness across .....
 
 
 
 
 Job Purpose
 
 
 
 
 The IT Compliance &amp; Risk Lead is responsible for the assessment of technology\ vendor risks and control effectiveness across the IT disciplines. The IT Risk lead will identify, classify, and document control issues in banks environment by documenting assessment results, recommending corrective action, tracking remediation, evaluating policy and control standard exceptions, and regularly report to IT management.
 
 
 
 
 Key Accountabilities
 
 
 
 
 <ul>
 <li>
 Supports the establishment of the IT risk management process and integration and maturing of the process across the IT disciplines and practices.
 </li>
 <li>
 Supports development of the technology risk framework, policies, standards, and risk taxonomy.
 </li>
 <li>
 Supports the implementation and adherence to the risk framework, in collaboration and conjunction with business-aligned risk partners.
 </li>
 <li>
 Evaluates and identify technology risk related to divisions and the enterprise, including emerging trends that may impact risk profile.
 </li>
 <li>
 Supports the self and control risk assessment (RCSA) for IT and engage with the IT stakeholders to define the controls in place, residual risk and treatment plans.
 </li>
 <li>
 Maintains a consolidated list of the technology risk at the enterprise level and ensure a continuous monitoring on the risks and corresponding mitigations plans.
 </li>
 <li>
 Implements risk assessments across the enterprise and build an overall profile of the technology risk.
 </li>
 <li>
 Provides credible challenge based on risk assessment results and ensure risk is being mitigated.
 </li>
 <li>
 Collaborates with division risk officers and subject matter experts to ensure policies and standards are practical, effective and efficient
 </li>
 <li>
 Qualifications Bachelor&rsquo;s/master&rsquo;s degree in computer science or related field.
 </li>
 <li>
 Professional Certifications COBIT, ITIL, CRISC, ISACA
 
 
 </li>
 </ul>
 Experience 6 &ndash; 8 Years
 
 
 
 
 Skills
 
 
 
 
 <ul>
 <li>
 Minimum 3-5 years of experience in IT risk and compliance role.
 </li>
 <li>
 Solid understanding of IT governance, information security policies, standards and industry best practices.
 </li>
 <li>
 Experience in technology and operational risks frameworks.
 </li>
 <li>
 Practical experience in scoping, conducting risk assessment, and documenting results.
 </li>
 <li>
 Detail oriented and able to meet tight deadlines.
 </li>
 <li>
 Excellent documentation skills and ability to communicate effectively across functional areas.
 </li>
 </ul>
</div>

IT COMPLIANCE & RISK

<div>
 At EY, we&rsquo;re all in to shape your future with confidence.
 
 
 We&rsquo;ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.
 
 
 Join EY and help to build a better working world.
 
 
 
 The opportunity
 
 
 
 To support the significant growth of our Technology Risk service in MENA, EY is looking to hire highly qualified resources. Specifically, as part of this job posting, we are looking for a Senior Consultant / Assistant Manager. Working across many different industries, this role will be responsible for executing and leading IT and cybersecurity projects. It is all about listening to our clients, asking the better questions, and supporting them in areas where there are no off-the-shelf solutions.
 
 
 
 Your Key Responsibilities
 
 
 
 A large part of the role will be engagement delivery and EY will expect the candidates to lead and deliver engagements with very minimal supervision. EY also expects the candidates to support executives in development of proposals, presentations and other business development activities. The candidate will be responsible for the delivery and quality of the final reports to EY's clients.
 
 
 An existing track record of successful engagement delivery in Technology Risk is expected of all candidates for this role. A Big 4 background or comparable consulting experience is highly advantageous. A broad background across IT and Cybersecurity is expected with specific experience in the following areas:
 
 
 <ul>
 <li>
 Expertise in Risk and Governance Frameworks, including IT governance frameworks (e.g., COBIT, ITIL, NIST), ISO 27001 standards, information security principles, policy development, and risk assessment.
 </li>
 <li>
 Proficiency in IT Systems Audit, encompassing planning, execution, audit methodologies, complex IT environment evaluation, control weakness identification, and effective communication of findings.
 </li>
 <li>
 Comprehensive knowledge of internal controls over financial reporting (ICFR), covering ITGCs, ITACs, SOX requirements, supporting financial audits with IT expertise, and strong liaison skills with financial auditors.
 </li>
 <li>
 Good understanding around the application systems such as SAP, Oracle, Microsoft Dynamics and operating systems and databases.
 </li>
 <li>
 Strong understanding of Business Continuity Planning (BCP), including BCP/DRP principles, business impact analyses, recovery strategy development, and plan testing.
 </li>
 <li>
 Strong understanding of cybersecurity fundamentals, including common threats, vulnerabilities, basic principles, and contributions to cybersecurity discussions.
 </li>
 <li>
 General Skills: Excellent analytical, problem-solving, communication, presentation, project management, organizational, leadership, client service, and business development skills.
 
 
 </li>
 </ul>
 
 Skills And Attributes For Success
 
 
 
 <ul>
 <li>
 Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or in a related field.
 </li>
 <li>
 Relevant professional certifications (e.g., CISA, CISSP, CISM, ISO 27001 Lead Auditor) are preferred.
 </li>
 <li>
 Minimum of 3 to 5 years of experience in IT audit, information security, or related fields.
 </li>
 <li>
 Strong knowledge of ITGC/ITAC, information security frameworks, and cybersecurity best practices.
 </li>
 <li>
 Excellent analytical, problem-solving, and communication skills.
 </li>
 <li>
 Ability to work independently and collaboratively within a team environment.
 
 
 </li>
 </ul>
 
 What We Offer You
 
 
 
 At EY, we&rsquo;ll develop you with future-focused skills and equip you with world-class experiences. We&rsquo;ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more.
 
 
 Are you ready to shape your future with confidence? Apply today.
 
 
 To help create an equitable and inclusive experience during the recruitment process, please inform us as soon as possible about any disability-related adjustments or accommodations you may need.
 
 
 
 EY
 
 | Building a better working world
 
 
 EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.
 
 
 Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.
 
 
 EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.
</div>

SC / AM - Technology Risk, Rapid Innovations, Pakistan

البنك التجاري الدولي

<div></div><div><div>Description<div></div> 
JOB PURPOSE:
To mirror the business lines and directly interfacing with Risk Champions via capturing, assessing &amp; mitigation of IT Risks &amp; IT Issues for their respective business domain (overall and by type of IT risks) conducting. Engage the business with IT risk team in reviewing IT applications related to Support Areas &amp; work with internal IT divisions for remediation actions for the captured IT risks.
KEY ACCOUNTABILITIES:
Description
1.Serve as a key partner in making IT Risk Owners and Business working seamlessly and successfully&bull;
2.Report a list of KRIs based on external best practices and regulatory expectations &amp; monitor Risks against them.
3.Work proactively on reporting any risk gaps or adverse trends, which are not highlighted in RCSAs.
4.Provide support for reviewing technology initiatives with reputational risks and red flags identified during defined intake procedures.
5.Manage relationships with business owners of IT risks, being the primary point of contact Update IT RCSA report, IT Risk Register, Risk status report, IT Risks/Priorities/Categorization and submit them to IT RMO team for consolidation
6.Conduct IT risk review for support applications/systems
7.Create, disseminate and update documentation of CIB&rsquo;s matrix of identified IT risks and controls.
8.Report IT Risks &amp; ensure expanding severity scale to include critical severity in all IT risk types.
9.Follow up on deficiencies identified in monitoring reviews, self-assessments, automated assessments, and internal and external audits to ensure that appropriate remediation measures are taken.
Policies, Processes and Procedures
10.Follow all relevant department policies, processes, standard operating procedures and instructions so that work is carried out in a controlled and consistent manner
Day-to-day Operations
11.Follow the day-to-day operations related to own jobs in the department to ensure continuity of work
Compliance
12.Comply with all relevant CBE regulations, banking laws, AML regulations and internal CIB policies and code of conduct in order to maintain CIB&rsquo;s sound legal position and mitigate any potential risks<div> 
</div></div><div>
Qualifications<div></div> 
QUALIFICATIONS, EXPERIENCE, &amp; SKILLS
<ul><li>Bachelor&rsquo;s degree in Business, Commerce or its equivalent.</li></ul>
<ul><li>Experience with Key Risk Indicators and Technology Risk reporting preferred</li></ul>
<ul><li>Minimum 10 years of solid experience for Sr. Officer in related areas such as Risk Management, Support Areas and IT.
</li></ul><ul><li>Very good command of English &amp; Arabic languages.</li></ul>
<ul><li>Excellent knowledge of Microsoft Office applications, Power Point, Word, Excel, Internet and E-mail</li></ul>
<ul><li>Solid knowledge about PPM, HR applications such as Taleo &amp; EBS, AML solutions such as Embargo</li></ul>
<ul><li>Ability to interpret regulations and laws, and communicate effectively to all levels of the organization.</li></ul>
<ul><li>Advanced knowledge of organization, technology controls, IT security &amp; Information security</li></ul>
<ul><li>Strong verbal and written communication skills.</li></ul>
<ul><li>Ability to work successfully in a cross-functional team environment.</li></ul>
<ul><li>High level of Accuracy &amp; Presentation Skills
</li></ul><ul><li>Delivering results: ability to plan and organize work in order to achieve objectives within set target dates</li></ul><div> 
</div></div><div>
Primary Location: Egypt-Giza-SMART VILLAGE BLDG. 1</div><div>
Job: Back Office</div><div>
Organization: FINANCE, STRATEGY, OPERATIONS &amp; TECHNOLOGY</div><div>
Shift: Day Job</div><div>
Job Type: Full-time Employee</div></div>

SUPPORT FUNCTIONS IT RISK SENIOR OFFICER

<div></div><div><div>Description<div></div> 
JOB PURPOSE:

To assess current IT applications risks, threat indicators, exploits and vulnerabilities and support incident response and remediation efforts and apply Risk Appetite Indicators and Key Risks Indicators (across all dimensions). To also act as IT Risk focal point with IT Governance &amp; Compliance, ERM, Information Security &amp; IT with respect to IT Risks reporting &amp; remediation and participate in the implementation process for IT Risk tools/systems with Projects team.

KEY ACCOUNTABILITIES: 
 
Description
 
 
1. Conduct IT Systems review to identify &amp; assess Risks with recommended remediation to mitigate the risk and closure of vulnerabilities.
 
2. Provide assessment &amp; assurance of the effectiveness and efficiency of IT control environment to monitor Risk Appetite Indicators and Key Risks Indicators across all IT domains &amp; Business areas 
 3. Follow up on current threat indicators, exploits &amp; vulnerabilities list remediation actions to ensure risk mitigation.
 
4. Support incident response and provide IT Risk Head with consolidated IT Risks progress reports.
 
5. Prepare consolidated IT Risk reports/presentations for dashboard managed by Technology Risk &amp; committees.
 
6. Ensure all IT Risk Management consolidated reports, presentations, SOP and other department&rsquo;s inputs/outputs are documented and updated.
 
7. Identify Top Critical IT Risks and highlighting possible Risks that are not currently captured and recommend a framework to capture and govern all risks.
 
8. Review and provide recommendations for the IT risk measurement techniques (e.g. RCSAs) and processes
 
9. Serve as the focal point with ERM, GC, Information Security &amp; IT with respect to IT Risks reporting &amp; remediation.
 
10. Participate in IT Risk tools/systems projects implementation with Projects team &amp; other IT divisions.

11. Prepare a consolidated list of RAIs / KRIs based on external best practices and regulatory expectations Direct.

Policies, Processes and Procedures

12. Follow all relevant department policies, processes, standard operating procedures and instructions so that work is carried out in a controlled and consistent manner.

Day-to-day Operations

13. Follow the day-to-day operations related to own jobs in the IT Security, Control and Quality Assurance department to ensure continuity of work.

Compliance

14. Comply with all relevant CBE regulations, banking laws, AML regulations and internal CIB policies and code of conduct in order to maintain CIB&rsquo;s sound legal position and mitigate any potential risks.<div> 
</div></div><div>
Qualifications<div></div> 
QUALIFICATIONS, EXPERIENCE, &amp; SKILLS

 Bachelor&rsquo;s degree in Information Technology, IT Security, Computer Information Systems or its equivalent.

 Information Assurance Certifications preferred (CISSP/CISA, Security+, GSEC, CRISC or equivalent) is plus

 For Senior Officer: Minimum 10 years of solid experience in related areas such as Risk Management, Technology Risk, Information security and IT.

 Very good command of English &amp; Arabic languages.

 Excellent knowledge of Microsoft Office applications, Power Point, Word, Excel, Internet and E-mail

 Solid knowledge about automated reporting system &amp; Project Management

 Experience with Key Risk Indicators and Technology Risk reporting are preferred

 Ability to interpret regulations and laws, and communicate effectively to all levels of the organization.

 Strong verbal and written communication skills.

 Ability to work successfully in a cross-functional team environment.

 Communication skills &amp; Presentation Skills

 Delivering results: ability to plan and organise work to achieve objectives accurately within set target dates.<div> 
</div></div><div>
Primary Location: Egypt-Giza-SMART VILLAGE BLDG. 1</div><div>
Job: Back Office</div><div>
Organization: FINANCE, STRATEGY, OPERATIONS &amp; TECHNOLOGY</div><div>
Shift: Day Job</div><div>
Job Type: Full-time Employee</div></div>

IT RMO SENIOR OFFICER

<div></div><div><div>Description<div></div> 
JOB PURPOSE:
To act as the first line of defence through managing the Information Technology risks with different lines of business to identify enhancements in IT Risk Management in line with Enterprise Risk Management and risk appetite framework, in order to adequately capture, assess, prioritize, report, mitigate &amp; manage IT risks based on international best practice. To report the top critical IT risks and highlight possible risks that are not currently captured and develop a framework to capture and govern all IT risks. To also develop and maintain IT Risk strategy, policy, procedures, process and manage IT Risk staff while embed and drive a risk culture &amp; risk appetite in all IT functions.
KEY ACCOUNTABILITIES:
 Description
 1. Participate in the development &amp; Provide recommendations on policies in collaboration with Technology Risk Management team on IT policies, systems, procedures, processes related to capturing &amp; managing different types of IT risks related to lines of business.
2. Work proactively with Enterprise Risk Management, Information Security, Technology teams and business domains in the design and implementation of IT risk assessment practices
 3. Manage Top Critical IT Risks and manage risks that are not currently captured and develop a framework to capture and govern all IT risks.
4. Assess tools and processes that are used to continuously update the risks in order to ensure that all material IT risks are adequately captured and managed.
5. Deploy Risk Appetite Indicators (RAIs) and Key Risks Indicators (KRIs) &amp; Review a consolidated list of RAIs / KRIs based on external best practices and regulatory expectations Direct and oversee processes to identify, assess, improve, and optimize risk practices within the IT environment.
6. Review and manage IT Risk status report and monitor the implementation of remediation actions to provide recommendations for the IT risk measurement techniques (e.g. RCSAs) and processes.
7. Force mindset and behavior changes in IT Risk Management at Bank level, &ndash; preparing a comprehensive communication, training and culture change initiative for people.
8. Communicate &amp; work directly with the business units and other internal IT stakeholder to facilitate IT risk analysis and risk management processes, identify acceptable levels of residual risk, and establish roles and responsibilities related to information classification and protection as per the published polices and respective Governance and Risk framework with various defense lines.
9. Lead the IT Risk Management function, that is responsible for providing independent assessment and assurance of the effectiveness and efficiency of the IT control environment.
10. Oversee the creation, dissemination and (as required) update documentation of CIB&rsquo;s matrix of identified IT risks and controls.
11. Direct IT functional teams in the development, implementation, monitoring, assessment, and reporting of control processes, documentation and risk mitigation activities.
 12. Work directly with the business units and other internal departments and organizations to facilitate IT risk analysis and risk management processes, identify acceptable levels of residual risk, and establish roles and responsibilities related to information classification and protection to ensure effective participation of IT Risk function in relevant committees such as IT Board Risk Committee.<div> 
</div></div><div>
Qualifications<div></div> 
QUALIFICATIONS, EXPERIENCE, &amp; SKILLS

Qualifications &amp; Experience

 Bachelor&rsquo;s degree in Business, Commerce, Economics or its equivalent.

 Master of Business Administration, CPA or CMA is preferable

 Minimum 15 years of different relative Business, Risk Management &amp; IT experience

 Specific system knowledge is a plus: Core banking system such as T24 provided by Temenos, Treasury Systems such as Kondor, Digital applications such as ACH, Smart Wallet, Mobile Banking &amp; Internet Banking, Risk Management systems such as SAS &amp; other support areas applications such as AML applications like Embargo, HR applications like Taleo &amp; EBS

 International standardization.

 Strong controls mindset and understanding of potential risks in IT, operations &amp; business environment.

Skills

 Communication Proficiency.

 Decision Making.

 Organizational &amp; Presentation Skills.

 Problem Solving/Analysis.

 Technical Capacity.

 Client management: tactful, resolute and committed to providing excellent customer service.

 Understands the use of information technology risks in a Strategic context as a means to an end

 Very good command of English &amp; Arabic languages

 Knowledge of business management and organization<div> 
</div></div><div>
Primary Location: Egypt-Giza-SMART VILLAGE BLDG. 1</div><div>
Job: Back Office</div><div>
Organization: FINANCE, STRATEGY, OPERATIONS &amp; TECHNOLOGY</div><div>
Shift: Day Job</div><div>
Job Type: Full-time Employee</div></div>

IT RISK MANAGEMENT HEAD

Scotiabank

<div>Requisition ID: 252111 
 
Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture. 
Purpose 
The role will contribute to the implementation of the U.S. Cyber and IT Risk Management Framework across the second line of defense. The framework encompasses oversight, reporting, governance, communications, and education. As part of the second line of defense for businesses in the United States, IT Risk provides independent oversight and challenge as well as assists in the development of the methodologies, policies, process, and tools to support the U.S. Cyber and IT Risk Management Framework. 
 
Contributes to the overall success of Cyber and IT Risk Management in the United States, ensuring specific individual goals, plans, initiatives are executed / delivered in support of the team&rsquo;s business strategies and objectives. Ensures all activities conducted are in compliance with governing regulations, interna policies and procedures. 
What You&rsquo;ll Do<ul><li> 
Assist with the development of U.S. Cyber and IT Risk Management Framework and best practices within the Bank while acting as a center of excellence for IT and Cyber Risk in the U.S.</li><li>
Collaborate with the lines of business by acting in a consultative capacity to advise on IT risks that influence their business and ability to meet established strategic objectives, while maintaining oversight and objective challenge.</li><li>
Execute effective challenges of IT Risk components of the first line in the Risk &amp; Control Self-Assessment (RCSA) process for the U.S., covering Legal Entities, Processes and Business Lines.</li><li>
Execute effective challenge of IT Incidents to define root causes and provides input into remediation actions.</li><li>
Assist with Deep Dives or Thematic Reviews to assess the effectiveness of controls surrounding key processes, and to identify remediation for gaps to actively and demonstrably mitigate IT risks.</li><li>
Execute challenges IT risks within scenario analysis.</li><li>
Monitor Cyber security risks and the controls in place within the bank, as well as external Cyber security reporting which may impact the bank.</li><li>
Monitor compliance with IT Risk Policies, Standards and Guidelines.</li><li>
Assist with monthly and quarterly IT and Cyber Risk reporting for U.S. committees</li><li> 
Has good knowledge of risk management practices required to create a culture of risk management compliance.</li><li>
Identifies, assesses, and monitors IT related risks based on risk management policies and procedures.</li><li>
Executes and challenges work of first line of defense for risk management purposes.</li><li>
Exhibits best practice risk management skills through effective internal risk controls, risk monitoring, risk assessment and improvement of risk management processes.</li><li>
Understands how the Bank&rsquo;s risk appetite and risk culture should be considered in day-to-day activities and decisions.</li><li>
Actively pursues effective and efficient operations of his/her respective areas in accordance with Scotiabank&rsquo;s Values, its Code of Conduct and the Global Sales Principles, while ensuring the adequacy, adherence to and effectiveness of day-to-day business controls to meet obligations with respect to operational, compliance, AML/ATF/sanctions and conduct risk.</li><li>
Champions a high-performance environment and contributes to an inclusive work environment.</li></ul> 
What You&rsquo;ll Bring 
<ul><li>
Good understanding of IT risk management frameworks in a global banking environment.</li><li>
Able to convey complex concepts and ideas on issues requiring interpretation and opinion.</li><li>
Independent in judgment and with a high standard of conduct and ethics. Able to challenge and be challenged while maintaining the highest levels of professionalism.</li><li>
Good negotiation skills and ability to resolve conflict between teams or individuals so that functional / organizational objectives are achieved.</li><li>
Excellent analytical skills; critical thinking and problem solving skills.</li><li>
Strong oral and written skills on a business level in English, good presentation skills, and an ability to work with all levels of the organization.</li><li>
Good interpersonal skills</li><li>
Expertise in IT Risk Management (e.g. Logical Access, Data Leakage, Disaster Recovery)</li><li>
Experience with Cybersecurity Risk Management is preferred</li><li>
3-5 years of experience in technology departments and/or risk management, preferably in a financial institution</li><li>
Industry certifications desirable (e.g., ISACA CRISC) or a desire to quickly obtain one</li><li>
Knowledge of relevant regulatory rules (FFIEC, NYDFS 500) and frameworks (NIST, COBIT) is preferred</li></ul> 
Interested? 
If your experience is closely related but doesn&rsquo;t align perfectly with every qualification, we do encourage you to apply - you might be the right candidate for this or other roles at Scotiabank!
At Scotiabank, every employee is empowered to reach their fullest potential, respected for who they are and, embraced for their differences. That&rsquo;s why we work to grow and diversify talent and engage employees in a performance-oriented culture. 
What's in it for you? 
Scotiabank wants you to be able to bring your best self to work &ndash; and life, every day. With a focus on holistic well-being, our many flexible benefit programs are designed to help support your unique family, financial, physical, mental, and social health needs. 
#GBMAuditRisk #GBM 
Location(s): United States : Texas : Dallas 
 
Scotiabank is a leading bank in the Americas. Guided by our purpose: &quot;for every future&quot;, we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.
 
 
At Scotiabank, we value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone. If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our Recruitment team know. Candidates must apply directly online to be considered for this role. We thank all applicants for their interest in a career at Scotiabank; however, only those candidates who are selected for an interview will be contacted.</div>

Manager, U.S. Cyber and IT Risk Management

Search 10000+ It risk manager jobs near you this March. New roles added regularly across leading industries. Apply today.