Cloud Governance Director - Scotiabank, Toronto

Position summary

The Director, Cloud Governance & Controls Engineering is responsible for establishing, operationalizing, and continuously enhancing a fully automated control and governance framework for cloud platforms within a highly regulated global financial institution. This role provides enterprise leadership to ensure that cloud infrastructure and platform services are designed, built, and operated with appropriate risk management, regulatory compliance, and security controls embedded by default across the full technology lifecycle.

Reporting directly to the Senior Vice President & Global Head, Global Banking & Markets Engineering, the role blends governance accountability with a strong engineering mindset. The Director partners closely with independent risk, compliance, and control functions to define a comprehensive control inventory, while leading the automation and enforcement of those controls through scalable cloud engineering frameworks. This position plays a critical role in enabling safe cloud adoption at scale, supporting innovation while meeting regulatory and audit expectations.

Key duties

In this role you will own and execute the following responsibilities:

• Own the design, implementation, and ongoing evolution of the cloud controls and governance framework, ensuring alignment with regulatory, risk, security, and audit requirements applicable to financial services.
• Partner with independent risk, compliance, and control functions to establish and maintain a comprehensive, well-defined control inventory for cloud infrastructure and platform services.
• Lead the automation and enforcement of controls across the cloud lifecycle, embedding guardrails into engineering platforms, pipelines, and reference architectures.
• Build and lead a high-performing team of 3 to 4 specialists responsible for translating control requirements into scalable engineering solutions and reusable frameworks.
• Collaborate with product and platform Technical Program Managers to ensure controls are captured early in design and consistently applied through build, deployment, and operations.
• Define and oversee engineering-led governance mechanisms, including dashboards, interfaces, and metrics that provide real-time visibility into control effectiveness and compliance posture.
• Influence cloud strategy and platform roadmaps to ensure risk and control considerations are addressed without compromising developer productivity or time to market.
• Support internal and external audits, regulatory inquiries, and management reviews by providing clear evidence of automated control design and operation.
• Establish standards, policies, and patterns that promote secure-by-design and compliant-by-default cloud engineering practices.

Qualifications

We would love to work with you if you bring the following skills and experience:

• Bachelor’s degree in computer science, Engineering, or a related technical discipline, or equivalent experience.
• Extensive experience in cloud engineering, platform engineering, or cloud security within largescale, regulated environments.
• Demonstrated experience designing and implementing automated controls, policy-as-code, and governance frameworks across IaaS and PaaS platforms.
• Proven people-leadership experience, including building and leading small, specialized technical teams.
• Experience in financial services, capital markets, or other highly regulated industries.
• Deep familiarity with public cloud platforms and modern control enforcement techniques (e.g., policy-as-code, CI/CD integration, cloud security posture management).
• Experience engaging with regulators, auditors, and second-line risk functions on technology control matters.
• Strong executive communication skills with the ability to influence senior technology and risk leaders.

What's on offer

Scotiabank is committed to an inclusive and high-performing culture, offering competitive programs and community engagement opportunities:

• Diversity, Equity, Inclusion & Allyship: An inclusive culture where every employee is empowered to reach their fullest potential, supported through Employee Resource Groups spanning diverse identities and backgrounds.
• Accessibility and Workplace Accommodations: Continuous efforts to locate, remove, and prevent barriers to maintain an accessible environment.
• Upskilling opportunities through online courses, cross-functional development, and tuition assistance.
• Competitive Rewards program including bonus, flexible vacation, personal and sick days, with benefits starting on day one.
• Community Engagement opportunities for belonging and giving back regardless of where you choose to work from.