Requisition ID: Tangerine is Canada's leading direct bank. We offer flexible and accessible banking options, innovative products, and award:winning Client service. The reason why Tangerine employees come to work each day is to help Canadians live better lives. We focus on making a difference in our communities, and that includes our own internal community. It's important to us that our employees feel empowered and enthusiastic about belonging to our Orange culture. The primary focus for the Manager, IT Risk : Data Protection is to manage Data Risk by providing oversight and advisory services to Tangerine Technology Groups and business lines regarding data protection (DP) control environment based on BNS Data Protection Framework, considering industry best practices and regulatory developments. The role will assist in ensuring structured and unstructured data protection controls are effective, and risks are mitigated accordingly. This individual will report directly to the Director, Technology and Cyber Risk. Is this role right for you? In this role, you will: IT Risk Governance : Maintain the compliance oversight of Scotiabank's security and risk management framework, policies, and standards for managing risks to its information assets and systems. : Identify, assess, prioritize, and report on material IT risks and aligned business areas. This will require working with various Risk owners and other control function groups. : Liaise with Scotiabank counterparts to identify evolving requirements. : Monitor evolving industry best practices, regulatory and legislative requirements. : Provide 1st Line of Defence functions with ongoing guidance to support the implementation of, and compliance with established IT and security requirements. : Perform various types of data analysis work and prepare monthly / quarterly reporting. IT Risk Advisory : Provide directions to Tangerine's functional teams to build their capability to identify, assess, mitigate, and monitor risks associated with their use of information and IT systems. : Responsible for planning and delivering compliance with BNS Data Protection Framework. Conduct control testing and track remediation. : Collaborate with management to develop solutions to improve compliance with Data Protection Controls. : Leads Data Protection related projects that are multi:jurisdictional in scope and/or involve multi:disciplinary project teams. : Support implementation of a strong Data Protection culture in partnership with stakeholders across various business lines. : Develop and maintain standardized processes, templates and guidance documentation related to the activities of the role as needed, striving for efficiency and streamlining. : Collaborates with multiple technology teams including infrastructure and business teams to assess control and remediation actions on the operating environment and ongoing projects. : Analyze and respond to risk assessment requests assigned to Technology Risk Team. : Build positive culture for the management of IT and security risks. Deliver ongoing counsel to risk owners to create IT risk awareness. IT Risk and Compliance Monitoring : Establish monthly reporting of KPI dashboard. : Maintain Tangerine's IT KPIs and KRIs within risk appetite for the IT domains assigned. : Facilitate and contribute to the preparation of management reporting relating to the responsibilities within the role. : Lead engagement with Tangerine's 2nd and 3rd Line of Defense function to influence the focus, scope, and criteria for the testing of the Bank's IT risk capabilities. : On:going monitor and track issues raised by Internal Audit, assist risk owners to ensure remediation is completed within pre:defined timelines and risk is addressed appropriately. Do you have the skills that will enable you to succeed in this role? We would love to work with you if you