Vice President, Identity Access Management

**Requisition ID**: 188063 We are committed to investing in our employees and helping you continue your career at Scotiabank. **_ Profile_** The Vice President, Identify Access Management, Information Security & Control (The VP) is responsible for supporting the achievement of the Bank’s information security objectives of integrity, confidentiality/privacy, availability and continuity, and the delivery of information security for the Scotiabank Group. **_ Accountabilities_** The VP will lead a large global team and be responsible for designing, implementing, and operating the following including: - Identity and Access Management (IAM) services across the global organization to provide the correct individuals, processes and devices with access to the right resources with the right data at the right time. - Appropriate controls including access control, custody of powerful privileges, logging, access governance, reporting and independent review to ensure only authorized access and modifications to data are performed in accordance with Bank standards and relevant legislative requirements as it relates to Identity Management. - Customer protection technologies to provide a secure online customer experience across all global online channels. - The Machine Identity Management (MIM) process to assign, monitor, remove, and organize digital credentials of devices that have access to Scotia data. In addition the VP will be responsible for: - Ensuring that the identity and access management direction meets the established organizational standards and continuously monitors the current access management processes, creating accurate documentation, analyzing user and service account access needs, and implementing new access systems when necessary. - Keeping abreast of best-in class technologies, capabilities, and experiences, continually researching and exploring opportunities to simplify the number of technologies and associated costs and continuously evaluating our existing toolsets against best-in-class alternatives. - Participation and influencing the overall IS&C strategy, vision and leadership team by providing insights, assistance where required and input into major projects and initiatives. - Maintain deep communications and positive relations across the cyber/financial industry. - Directing day-to-day activities in a manner consistent with the Bank’s risk culture and the relevant risk appetite statement and limits. Communicates the Bank’s risk culture and risk appetite statement throughout their teams. - Creating an environment in which his/her team pursues effective and efficient operations of his/her respective areas in accordance with Scotiabank’s Values, its Code of Conduct and the Global Sales Principles, while ensuring the adequacy, adherence to and effectiveness of day-to-day business controls to meet obligations with respect to operational, compliance, AML/ATF/sanctions and conduct risk. - Building a high-performance environment and implements a people strategy that attracts, retains, develops and motivates their team by fostering an inclusive work environment and using a coaching mindset and behaviours; communicating vison/values/business strategy; and, managing succession and development planning for the team. **_ Education / Experience_** - An experienced Information Security & Controls professional with clear success leading large global Identity Access Management teams. - Expert knowledge of third-party security solutions, systems architectures, operational models, security techniques and standards such as NIST and the MITRE ATT&CK framework. Location(s): Canada : Ontario : Toronto Scotiabank is a leading bank in the Americas. Guided by our purpose: "for every future", we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.