Information Security Engineer (Cryptographic Operations)

Requisition ID: 211887

Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.

Cryptographic Operations is a unit within Scotiabank’s Information Security & Control (IS&C) that provides services including HSM engineering, key and secret management, certificate management, etc. Cryptographic Operations team has enterprise-wide accountability and is highly supportive of the Bank’s business, safeguarding and running some of the bank's Critical Information Assets. The team is purposefully formulated with the correct expertise to align with IT&S Strategic goals. Strong investments have been focused on automation and research into industry-leading cryptographic tools to meet Technology Enabler initiatives such as Improving Productivity and Modernizing to Win enabling the Bank to safely conduct business transactions in high-risk environments (e.g. Internet, data transmissions, remote access) deployed over core business delivery channels that are global in scope.

Key Accountabilities for Information Security Engineer: 

• Deliver Cryptographic HSM solutions and services across the enterprise by partnering with internal and external stakeholders.
• Provides second-line support of HSM and Key Management technologies, participating in the team’s 24/7 standby schedule.
• Actively reviews and actions requirements for patching, maintaining to supportable HW and SW versions, currency lifecycle management inclusive of obsolescence planning, service ownership, reporting and resolving of Audit findings.
• Responsible for creation of new and upkeep of all HSM inventories, documentation, knowledge base and checklist.
• Participate in HSM incident response investigations and escalations on HSM infrastructure, cross functionally with other teams to deliver best in class service and operational effectiveness and efficiency with collective ownership representing Crypto to action and resolve.
• When required attending and participating onsite with audited key ceremonies at the Crypto Production Center located in Scarborough ON.
• Champions a customer focused culture to deepen client relationships and leverage broader Bank relationships, systems and knowledge.
• Champions a high-performance environment and embracing Scotiabank’s values and contributing to an inclusive work environment.
• Participates in project activities for critical applications requiring managed cryptographic keys and integration with secure key storage solutions.
• Accountable for managing day 2 intake by reviewing, assessing, and delivering.

Qualifications:

Must Have:

• Strong knowledge in server administration (Linux, and Windows).
• Related University degree or college diploma (computer science, engineering, and other related majors) and a minimum of three (3) years equivalent security industry-related experience.
• Must have the ability to generate reports and tailor communication strategies for various levels of technical staff and executive management.
• Good communication and support skills for triaging and resolving technical issues.
• Demonstrable knowledge about cryptography and network security.
•  

Nice to have:

• HSM experience with strong knowledge in implementation (installation, configuration, integration) and enterprise grade application support.
• Expertise and experience with General and Payment grade HSM technology e.g. Thales Luna, Atalla, Futurex, nShield, & Marvell Liquid Security.
• Knowledge and experience with Service NOW and ITIL processes, incident response.
• IT standards, methodologies, key management regulations, and audit requirements.
• Proven security and risk awareness i.e. CISSP or any other security designations would be an asset.
• Software development and scripting experience.

Location(s):  Canada : Ontario : Toronto 

Scotiabank is a leading bank in the Americas. Guided by our purpose: "for every future", we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.  

At Scotiabank, we value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone. If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our Recruitment team know. If you require technical assistance, please click here. Candidates must apply directly online to be considered for this role. We thank all applicants for their interest in a career at Scotiabank; however, only those candidates who are selected for an interview will be contacted.