Overview
Join to apply for the Incident Manager role at Scotiabank.
Location : Bogota, Colombia
In This Role You Will
In the role of Incident Manager, you’re responsible for responding to account-level threats and attacks at scale. This includes incident triage, threat-actor journey mapping, containment, remediation, and identification of root cause contributors. You regularly connect with your colleagues across Fraud Threat Management to ensure ongoing situational awareness across the team. You’re calm under pressure and draw on your years of experience and knowledge of industry best practice to inspire confidence with stakeholders across the Bank as you keep our customers and the Bank safe.
Responsibilities
- Respond to account-level attacks targeting any of Scotiabank’s products and digital properties in Canada. Regularly review and incorporate lessons learned.
- Produce and provide timely incident communications for a variety of audiences in accordance with the incident management protocol, incident communication matrix, and associated playbooks to ensure awareness and appropriate levels of engagement as part of response activities.
- Provide guidance and recommendations to leadership, peers, and stakeholders across the team to support effective decision-making during incident response, post-incident, and prevention phases.
- Identify systemic issues, recurring problems, and identified threats / vulnerabilities to our Fraud Problem Management function. Ensure these and other root cause contributors are captured within post-incident reviews.
- Act as a SME resource to the Fraud Problem Management team to support appropriate and effective resolutions for identified problems.
- Work to maintain and exceed established incident management KPIs including mean-time-to-detect (MTTD), mean-time-to-containment (MTTC), mean-time-to-remediation (MTTR) as measured by event type and severity.
- Identify and recommend changes to cyber-fraud monitoring and alerts that you and your colleagues receive to ensure ongoing improvements to our early-detection efforts.
- Provide mentorship and coaching to new members of the team to ensure adherence to our incident protocol, incident communication matrix, service-level commitments, and all associated playbooks.
- Regularly recognize and reinforce high-quality work and behaviours of peers and others within the Bank that contribute to the success of our mission.
- Based on lessons learned during incident response, identify suggested changes to our comprehensive incident management playbooks outlining processes, tools, data, and technology requirements, as well as communications protocols and cross-functional interaction models with key internal partners (ex. IS&C, Crisis Management, Corporate Security, and technology).
- Engage with vendors supporting our team with cyber-fraud incident response and red teaming.
- Maintain ongoing awareness of the cyber-fraud threat landscape, including through certification, continuing professional education (CPE), industry group participation, threat intelligence feeds, and direct research.
- Deliver training within Fraud Management teams and business lines to increase their preparation for, and ability to manage potential incidents that may impact their operations and customers.
- Understand and apply the Bank’s risk appetite and risk culture for day-to-day activities and decisions.
- Contribute to the overall success of the Global Fraud Management function, ensuring specific individual goals, plans and initiatives are delivered in support of the team’s business strategies and objectives. Ensures all activities conducted in accordance with Scotiabank’s values and Code of Conduct and are in compliance with governing regulation and internal policies, procedures, and standards.
Qualifications
English B2+ Conversational1 year of experience with cybersecurity and Fraud1 year of experience working as a team lead or as a backupStrong interest in utilizing technical knowledge to perform fraud investigations using various analytical methodsExperience with security monitoring and threat intelligence programsKnowledge of intrusion detection infrastructure to detect and remediate threatsExperience investigating and reviewing suspicious activities (e.g., phishing) reported by customers or employeesAbility to contribute to strategic direction for security-related technologies or controls to reduce threat levelsAbility to explain complex technology to non-technical audiencesStrong verbal / written / presentation English skills; Spanish is a plusAt least 1 year hands-on experience in network security, information security, fraud investigations, or related fieldsAbility to prioritize and complete tasks and provide oversight and training to less experienced team membersWorking knowledge of network principles, cyber security concepts, investigation procedures, and adversary techniquesStrong analytical and problem-resolution skillsCapability to conduct investigations across multiple platforms and technologiesPost-secondary educationCertifications (GSEC, CompTIA Security+, CCNA, CompTIA Networking+, ITIL CEH, OSCP) are nice to haveEmployment details
Location : Bogota, Bogota D.C., ColombiaJob function : Information TechnologyIndustries : BankingSeniority level : Mid-Senior levelEmployment type : Full-timeWe appreciate all applicants, but only those selected for an interview will be contacted. Scotiabank is an equal opportunity employer and is committed to an inclusive and accessible recruitment process. If you require any accommodations during the recruitment process, please indicate this to our Recruitment team.
#J-18808-Ljbffr