Find work in Canada.

624,030 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 10 mins ago
R|
Project Manager
RI-MUHC | Research Institute of the MUHC | #rimuhc
Montreal, QC
- Contract
The Centre for Precision Psychiatry – Quebec (CPPQ) is seeking a project manager for our large-scale longitudinal mental health research project across three clinical research sites,…
Added 10 mins ago
GO
Manager - Community Nursing
Government of Yukon
Whitehorse, YT
- Full-time
As a Manager of Community Nursing, you will form an integral part of our collaborative leadership team, using your unique skill set to lead teams, empower employees in their decision…
Added 10 mins ago
R|
Clinical Research Coordinator
RI-MUHC | Research Institute of the MUHC | #rimuhc
Montreal, QC
- Full-time
Under the supervision of the group manager, the clinical research coordinator will be responsible for supporting the successful conduct of clinical research trials in oncology at the Cedars…
Added 10 mins ago
R|
Clinical Research Coordinator - Nurse (CIM)
RI-MUHC | Research Institute of the MUHC | #rimuhc
Montreal, QC
- Contract
Under the supervision of the Manager, Pediatric and Adult Research, Centre for Innovative Medicine (CIM), the Clinical Research Coordinator - Nurse is responsible for supporting the…
Added 10 mins ago
R|
Animal Health Technician - Part-time Occasional
RI-MUHC | Research Institute of the MUHC | #rimuhc
Montreal, QC
- Part-time
Under the general supervision of the manager of the Animal Resources Division, the incumbent performs animal care-related duties, technical procedures and administrative duties related to…
Added 10 mins ago
R|
ACCESS ALS Program Development Manager
RI-MUHC | Research Institute of the MUHC | #rimuhc
Montreal, QC
- Temporary
…Phase 1 unit - this initiative will close critical gaps in site capabilities, optimize recruitment, and attract high-value industry-sponsored trials across the country. The coordinating…
Added 10 mins ago
R|
Licensed Practical Nurse (LPN) or Research Nurse
RI-MUHC | Research Institute of the MUHC | #rimuhc
Montreal, QC
- Full-time
…the team by completing additional tasks as directed by the…
Added 10 mins ago
R|
Animal Care Worker - Part-time occasional
RI-MUHC | Research Institute of the MUHC | #rimuhc
Montreal, QC
- Part-time
Under the general supervision of the Animal Resources Division Manager, the candidate performs animal care-related duties, technical procedures and administrative duties related to the care…
Added 10 mins ago
R|
Clinical Research Coordinator - CIM (Oncology)
RI-MUHC | Research Institute of the MUHC | #rimuhc
Montreal, QC
- Full-time
Under the general supervision of the Manager oncology, for the Centre for Innovative Medicine (CIM), the incumbent is responsible to conduct clinic interventions following protocols,…
Added 10 mins ago
R|
Clinical Research Manager
RI-MUHC | Research Institute of the MUHC | #rimuhc
Montreal, QC
- Full-time
…governmental guidelines and regulations, the Clinical Trial Project Manager is responsible for the operational management of multicentre clinical research studies. The Project Manager…
Added 10 mins ago
R|
Lab Manager
RI-MUHC | Research Institute of the MUHC | #rimuhc
Montreal, QC
- Full-time
The Laboratory Manager oversees both the day-to-day administrative infrastructure and basic science research activities within the Otorhinolaryngological Sciences Laboratory. This dual-role…
Added 10 mins ago
R|
Clinical Research Coordinator – Nurse - CIM - Phase 1 Oncology
RI-MUHC | Research Institute of the MUHC | #rimuhc
Montreal, QC
- Full-time
Under the supervision of the Manager of Oncology Research, Centre for Innovative Medicine (CIM), the Clinical Research Coordinator - Nurse is responsible for supporting the successful…
Added 10 mins ago
R|
Clinical Research Coordinator - Regulatory Affairs (CIM)
RI-MUHC | Research Institute of the MUHC | #rimuhc
Montreal, QC
- Full-time
Under the supervision of the Manager, Clinical Research Administration Centre for Innovative Medicine (CIM), the incumbent is responsible for supporting the submission of clinical research…
Added 10 mins ago
Manager, Fire Prevention and Preparedness
Toronto Community Housing or Toronto Seniors Housing
Toronto, ON
Reporting to the Director, Emergency Response & Compliance, the Manager, Fire Prevention and Preparedness will support the advancement of a proactive fire safety culture at TCHC. The…
Added 41 mins ago
CW
Facility Solutions Manager, full time
City Wide Facility Solutions
Burnaby, BC
- $55,000 to $80,000 CAD / year
- Full-time
The Facility Solutions Manager is responsible for the business operations of an assigned client contracted service area. This is an outside, B2B account management position that provides…
Added 41 mins ago
CW
Facility Solutions Manager, full time
City Wide Facility Solutions
Vancouver, BC
- $55,000 to $80,000 CAD / year
- Full-time
The Facility Solutions Manager is responsible for the business operations of an assigned client contracted service area. This is an outside, B2B account management position that provides…
Added 41 mins ago
SJ
Body Piercer - Banter by Piercing Pagoda - King of Prussia Mall
Signet Jewelers
King, ON
- Full-time
We have many opportunities available on our other career site pages. Click here to link to our careers page!
Added 1 hour ago
TH
Merchandising Execution Associate Part Time - 7255 Cranbrook
The Home Depot Canada
Cranbrook, BC
- Part-time
…sales and maximize inventory turns. MEAs work in teams with on-site supervision, and provide service to multiple departments in the stores. These associates execute approved general bay…
Added 2 hours ago
* EHS Manager *
Oerlikon
Fort Saskatchewan, AB
Reporting to the QESH Manager, you will serve as the site's subject matter expert for all environmental, health, and safety matters. This position requires a visible presence in operations,…
Added 3 hours ago
C
Security Technician - Saskatoon Region
Convergint
Saskatoon, SK · CA SK Saskatoon
- Full-time
Works closely with the Project Manager and/or supervisor and assists in the overall coordination of specific projects; makes recommendations regarding quality of work and potential changes…
Added 3 hours ago
C
Operations Supervisor - Security Systems
Convergint
Burnaby, BC · CA BC Burnaby
- Full-time
Supervises colleagues (typically Project Manager & Project Coordinators) in a manner that maintains morale, skills proficiency and productivity. Recruit and hire team members as required in…
Added 3 hours ago
C
Project Specialist - Security Systems
Convergint
Toronto, ON · CA ON Etobicoke
- Full-time
Works closely with the Project Manager and/or Operations Manager and assists in the overall coordination of specific projects; makes recommendations regarding quality of work and potential…
Added 3 hours ago
C
CFAA Fire Alarm Technician - FIFO 14/14
Convergint
Mississauga, ON · CA AB Suncor
- Full-time
Job Description: We are currently recruiting for Certified Fire Alarm Technician to join our team at Suncor Base Plant site. As the Fire Alarm Technician, you will be responsible for…
Added 3 hours ago
C
CFAA Fire Alarm Technician - FIFO 14/14
Convergint
Mississauga, ON · CA AB Suncor
- Full-time
Job Description: We are currently recruiting for Certified Fire Alarm Technician to join our team at Suncor Base Plant site. As the Fire Alarm Technician, you will be responsible for…
Added 3 hours ago
C
CFAA Fire Alarm Technician - Project Focused
Convergint
Calgary, AB · CA AB Calgary
- Full-time
…and related project activities on a regular basis to project manager/supervisor. Completes work on time and according to project schedules including project change…

Scotiabank

Senior Director, Technology Risk Assessments

Toronto, ON, M1K 5L1, Canada

Apply About employer

Applications open in a new tab.

Job details

Experience: 10+ years of progressive experience in technology risk, cybersecurity or risk assessment, including senior leadership of technology or cybersecurity risk assessment functions.
Posting language: English
Posted: Nov 4, 2026

Original job description

Requisition ID: 278455

Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.

Scotiabank is seeking a transformational senior leader to modernize how technology and cybersecurity risks are assessed across the Bank. Reporting to the Vice President, IT Governance & Risk Oversight within the Office of the Chief Information Officer, the Senior Director, Technology Risk Assessments leads Scotiabank's global first-line technology and cybersecurity assessment capability relating to the Bank’s Threat Risk Assessments and Vendor Security Review processes.

The Senior Director brings the Bank's Threat Risk Assessment and Vendor Security Review processes under one leadership responsibility, creating an integrated approach to assessing internally developed technology solutions and third-party technology services. Together, these form an integrated Assessment Authority: one first-line capability for technology and cybersecurity assessment that preserves specialized expertise while introducing common leadership and strategic direction, coordinated intake and triage, consistent assessment methods and risk language, shared evidence and quality principles, reusable platform and security patterns, stronger risk reporting and traceability, modern workflows and structured data, and progressive use of artificial intelligence (AI) and automation.

This role is broader than traditional assessment delivery. It is an enterprise leadership and transformation opportunity to turn fragmented, document-heavy processes into an integrated, risk-based and evidence-informed assessment lifecycle. It brings together technology risk, cybersecurity, security advisory, third-party risk, cloud and AI security, Governance, Risk and Compliance (GRC) modernization, adoption of ServiceNow Integrated Risk Management (IRM), data and automation, and leadership of a global team.

You will shape and lead six connected themes:

Integrated Assessment Authority: One accountable leadership model for Threat Risk Assessment (TRA) and Vendor Security Review (VSR), with common direction, methods and risk language across specialized assessment teams.
Shift-left security assessment: Technology and cybersecurity risks identified and addressed earlier in architecture, design and delivery, when they are least costly to resolve.
Platform and application assessment: A two-level model that assesses shared platforms once and focuses application and vendor assessments on what is genuinely specific.
Evidence-informed risk decisions: Risk conclusions grounded in structured, verifiable evidence and consistent rating criteria rather than document volume.
Modern workflow, data and automation: Assessments run through modern ServiceNow IRM workflows, supported by structured data and the progressive use of AI and automation.
Portfolio risk insight: Clear, traceable reporting that surfaces recurring and systemic risks across the Bank's technology and third-party portfolio.

The platform and application model works at two levels:

Horizontal assessments evaluate common platforms, shared services and approved technology patterns once, so related controls and evidence can be reused.
Vertical assessments evaluate the application, workload, project, vendor or material change, and focus on specific deviations, exposures and residual risks

Is this role right for you? In this role, you will:

Lead the existing TRA and VSR capabilities under one senior leadership model, preserving specialized expertise while establishing common direction, coordinated intake and triage, and shared standards.
Define and maintain consistent assessment methodology, risk-rating criteria, quality requirements, evidence principles and finding taxonomies, aligned to the Bank's technology control objectives and enterprise control library and to recognized frameworks such as the National Institute of Standards and Technology Cybersecurity Framework (NIST CSF), ISO/IEC 27001 and the Payment Card Industry Data Security Standard (PCI DSS).
Embed technology and cybersecurity assessment earlier in architecture, design and technology delivery, including the Bank's delivery framework, architecture review processes and Continuous Integration and Continuous Delivery (CI/CD) pipelines.
Establish reusable security and platform patterns that allow downstream assessments to inherit approved baselines.
Assess material application-specific and vendor-specific risks, including data, identity, integration, architecture, exposure and residual risk.
Strengthen threat modelling and scenario-based risk analysis, using recognized approaches such as STRIDE and MITRE ATT&CK.
Act as the business owner for the technology-risk assessment capability within ServiceNow IRM, defining assessment requirements, workflows and data needs while working with the technical platform team, which owns platform configuration and delivery.
Lead the assessment-domain transition from legacy processes and repositories into modern IRM workflows, preserving application-to-assessment and application-to-risk traceability and establishing clear data-quality requirements.
Define risk-based triggers for reassessment following material change, significant vulnerability, control failure or deviation from an approved pattern.
Establish targeted post-implementation assurance for selected material controls, using authoritative evidence from accountable control owners and specialist functions.
Prioritize appropriate AI and automation opportunities across intake, triage, context extraction, pattern matching, assessment drafting, evidence orchestration and portfolio insight, in alignment with the Bank's enterprise artificial intelligence and technology-risk automation initiatives.
Identify recurring and systemic risks across the assessment portfolio and provide clear risk insight to technology leaders and governance forums.
Produce assessment outcomes that are timely, consistent, traceable, evidence-informed and defensible for regulatory, second-line, quality assurance and Internal Audit review, including under the Office of the Superintendent of Financial Institutions (OSFI) Guideline B-13 and the New York State Department of Financial Services (NYDFS) Part 500 cybersecurity regulation, where applicable.
Lead and develop a large, multidisciplinary and geographically distributed team, building capabilities in security advisory, cloud and AI security, third-party security risk, methodology, data and automation..

Critical Partnerships:

Success depends on strong partnerships across the Bank's three lines of defense. Each partner keeps its established mandate, and the Senior Director works with them to ensure that assessment conclusions are well-informed and aligned. Key partners include:

Technology leadership: Chief Information Officers (CIOs) and their delivery, architecture and engineering teams, the primary clients of the assessment capability.
Cybersecurity and architecture: The Office of the Chief Information Security Officer (CISO) and Enterprise Architecture, to align security standards, patterns and design guidance.
Control owners and control testing: Teams that implement and operate controls, and the Bank's technology control testing function, whose evidence informs assessment conclusions.
Technology risk management: Technology risk teams and Risk and Control Self-Assessment (RCSA) teams, which manage and aggregate technology risk across the Bank.
Platform and automation: The ServiceNow IRM platform and implementation teams, and the Bank's enterprise artificial intelligence and technology-risk automation initiatives, to ensure aligned workflows and data.
Governance and reporting: IT risk governance, issue management and reporting teams within the Office of the Chief Information Officer.
Independent oversight: Second-line risk management, Internal Quality Assurance (IQA) and Internal Audit, which provide independent challenge and assurance, and the teams that manage the Bank's regulatory relationships

Do you have the skills that will enable you to succeed in this role? We'd love to work with you if you have:

University degree in Computer Science, Engineering, Information Security or a related field.
10+ years of progressive experience in technology risk, cybersecurity or risk assessment, including senior leadership of technology or cybersecurity risk assessment functions.
Deep expertise in security advisory, assessment methodology and threat modelling at enterprise scale.
Strong experience in third-party and vendor security risk, and in cloud, AI, application and platform security.
A track record of leading enterprise GRC transformation, including with ServiceNow IRM or a comparable GRC platform, from business requirements through adoption.
Strong understanding of development, security and operations (DevSecOps) practices and secure-by-design principles.
Experience engaging regulators and Internal Audit in a highly regulated environment, ideally financial services.
Proven ability to lead large, distributed teams and to lead through influence across federated organizations and with senior technology executives.

Preferred experience

Advanced degree or professional certifications such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC) or Certified Information Security Manager (CISM).
Experience leading platform- and pattern-based assessment models that allow controls to be inherited across applications and workloads.
Hands-on experience with risk data, evidence orchestration and workflow automation, including integrations with security tooling.
Familiarity with AI, machine learning and agentic AI applications in GRC, such as intake triage, artifact analysis, control mapping and risk-theme identification.
Experience applying structured risk-rating criteria, calibration and quantitative risk techniques.
Experience partnering with control-testing functions to integrate authoritative control evidence into risk assessment, ideally within a large financial institution

What's in it for you?

Diversity, Equity, Inclusion & Allyship - We strive to create an inclusive culture where every employee is empowered to reach their fullest potential, respected for who they are, and are embraced through bias-free practices and inclusive values across Scotiabank. We embrace diversity and provide opportunities for all employee to learn, grow & participate through our various Employee Resource Groups (ERGs) that span across diverse gender identities, ethnicity, race, age, ability & veterans.
Accessibility and Workplace Accommodations - We value the unique skills and experiences each individual brings to the Bank and are committed to creating and maintaining an inclusive and accessible environment for everyone. Scotiabank continues to locate, remove and prevent barriers so that we can build a diverse and inclusive environment while meeting accessibility requirements.
Upskilling through online courses, cross-functional development opportunities, and tuition assistance.
Competitive Rewards program including bonus, flexible vacation, personal, sick days and benefits will start on day one.
Community Engagement - no matter where you choose to work from; we offer opportunities for community engagement & belonging with our various programs such as hackathons, contests, Humans of Digital and much more.

Location(s): Canada : Ontario : Toronto

Scotiabank is a leading bank in the Americas. Guided by our purpose: "for every future", we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.

At Scotiabank, we value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone. If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our Recruitment team know. If you require technical assistance, please click here. Candidates must apply directly online to be considered for this role. We thank all applicants for their interest in a career at Scotiabank; however, only those candidates who are selected for an interview will be contacted.

Apply About employer

More about this job

Responsibilities

The Senior Director leads the global technology and cybersecurity assessment capability, integrating Threat Risk Assessments and Vendor Security Reviews into a unified authority. This role involves driving enterprise-wide transformation by modernizing assessment workflows, implementing AI-driven automation, and providing clear risk insights to senior leadership.

Requirements

Candidates must possess a university degree and over 10 years of progressive experience in technology risk or cybersecurity, including senior leadership roles. Strong expertise in GRC platforms, regulatory frameworks, and leading large, distributed teams is essential for success in this role.

Skills

Technology risk management
Cybersecurity
Risk assessment
Security advisory
Threat modelling
Third-party risk management
Cloud security
AI security
GRC modernization
ServiceNow IRM
DevSecOps
Strategic leadership
Regulatory compliance
Data automation
NIST CSF
ISO/IEC 27001

Benefits

Competitive rewards program
Bonus
Flexible vacation
Personal days
Sick days
Benefits from day one
Tuition assistance
Upskilling opportunities
Employee resource groups

Visa sponsorship

Not detected in the job text

Keywords

Technology Risk
Cybersecurity
Threat Risk Assessment
Vendor Security Review
ServiceNow IRM
GRC
NIST CSF
ISO/IEC 27001
PCI DSS
OSFI Guideline B-13
NYDFS Part 500
DevSecOps
STRIDE
MITRE ATT&CK
Cloud Security
AI Security
Automation
Risk Management
Information Security
Data Quality
Architecture Review
Continuous Integration
Continuous Delivery
Threat Modelling
Risk-based Assessment
Enterprise Leadership
Regulatory Compliance
Internal Audit
Security Advisory
Platform Security

Report this job