Director, Cloud Platform and Application Security Solutions

Requisition ID: 236196

Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.

**Purpose**

Leads and oversees Cloud Security Solutions department of Cloud Security Solution and Security Advisory Transformation in Canada ensuring business strategies, plans and initiatives are executed / delivered in compliance with governing regulations, internal policies and procedures.

The Director of Cloud Security Solutions will work as part of the security engineering and architecture team, collaborating with cloud architects, cloud platform engineering team, DevOps teams, and IT operations. This role will work closely with compliance, risk management, and software development teams to ensure that security best practices are integrated into cloud platform design and operations.

**Role Summary**

The Director of Cloud Platforms Security Solution leads a team of Security Solution Advisors/Architects responsible for designing and maintaining security solutions across cloud environments, including public, private, and hybrid clouds. This role ensures that the organization’s cloud infrastructure, platforms, and services are secure and compliant with regulatory standards and industry best practices. The leader will also contribute to the development of security policies and work closely with multiple teams to embed security into cloud services lifecycle

**Is this role right for you? In this Role, you will**:

- Leadership: Lead a team of Senior Cloud Security Solution Architects and Security Advisors and drive a customer focused culture throughout their team to deepen client relationships, accelerate the delivery of secure cloud solutions and platforms leveraging broader Bank relationships, systems and cloud security knowledge.
- Cloud Security Architecture and Implementation:

- Develop and enforce security patterns, policies, standards, and procedures to protect the integrity, availability, and confidentiality of the organization’s cloud infrastructure.
- DevSecOps Integration:

- Integrate security tools and practices into the DevOps pipeline to ensure continuous delivery without compromising security.
- Cloud Security Monitoring:

- Implement and manage security monitoring tools to detect threats, anomalies, and potential security incidents in cloud environments.- Collaborate with the incident response team to ensure that cloud-specific threats are properly addressed and mitigated.
- Vulnerability and Patch Management:

- Compliance and Risk Management:

- Ensure cloud security solutions align with industry regulations and organizational compliance requirements.
- Manage the audit process for cloud security, responding to compliance assessments and third-party audits.
- Training and Mentoring:

- Provide guidance and training to their team on cloud security best practices.
- Mentor junior security solution architects and security advisors and assist in their professional development.
- Continuous Improvement:

- Stay updated with emerging trends in cloud security and propose improvements to the current security posture.
- Evaluate new cloud security controls, technologies, tools, and processes to enhance the organization’s security in cloud environments.
- Understand how the Bank’s risk appetite and risk culture should be considered in day-to-day activities and decisions.
- Create an environment in which their team pursues effective and efficient operations of their respective areas in accordance with Scotiabank’s Values, its Code of Conduct and the Global Sales Principles, while ensuring the adequacy, adherence to and effectiveness of day-to-day business controls to meet obligations with respect to operational, compliance, AML/ATF/sanctions and conduct risk.
- Build a high-performance environment and implement a people strategy that attracts, retains, develops and motivates their team by fostering an inclusive work environment and using a coaching mindset and behaviors; communicating vison/values/business strategy; and, managing succession and development planning for the team.

**Do you have the skills that will enable you to succeed in this role? We'd love to work with you if you have**:

- Bachelor’s or Master’s degree in Computer Science or a related field.
- 10+ years of experience in cloud security, security architecture, or information security, with a minimum of 5 years in a leadership role.
- Hands-on experience in threat modeling, DevSecOps, and implementing secure cloud solutions.
- Cloud Security Architecture, Risk Management, Cloud services.
- Specific regulatory or compliance knowledge OSFI, PIPEDA, FedRAMP, GDPR, PCI DSS CIS, NIST.
- Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), or other cloud-specific certifications.

**What's in it for you?**
- Diversity, Equity, Inclusion & Allyship - We strive to create an inclusive culture where every employee is empowered t