Senior Audit Manager, IT and Cyber Security Audit (Cloud)

Responsibilities

• Lead and conduct complex IT and Cyber Security risk-based audit assessments focusing on cloud governance, DevSecOps, and digital banking infrastructure.
• Act as Officer in Charge (OIC) for assigned audits, overseeing execution, planning, and reporting.
• Serve as a subject matter expert in auditing cloud security controls, including identity and access management, encryption, and network segmentation.
• Evaluate DevSecOps and secure SDLC controls, including CI/CD pipeline governance, container security, and infrastructure-as-code.
• Assess API-related risks, including authentication, authorization, and gateway policy enforcement.
• Identify root causes of control weaknesses and provide actionable recommendations to management.
• Build and maintain strong relationships with internal stakeholders, external stakeholders, and regulators.

Requirements

• 5+ years of experience in information technology and cyber security.
• Bachelor’s degree in Information Technology, Computer Science, or an equivalent field.
• Professional certification in one or more of the following: CISA, CISM, CISSP, CCSP, GCIA, or CEH.
• Strong technical knowledge of cloud-native security, DevSecOps, CI/CD risk, and API security fundamentals.
• Proficiency with Microsoft Office (Word, Excel, PowerPoint).
• Experience with security assessment tools and Security Operations Centre software (e.g., IDS, IPS, SIEM).

Preferred Qualifications

• Cloud engineering or architecture designation.
• Experience working in highly ambiguous and rapidly changing environments.
• Knowledge of web application security, penetration testing, and vulnerability assessments.

About the Company

Scotiabank is a leading bank in the Americas, committed to helping customers, families, and communities achieve success through a broad range of financial products and services. We value unique skills and experiences and are dedicated to maintaining an inclusive and accessible environment for all employees.