Information Security Specialist (US) Risk Controls & Governance

Work Location:

Hours:

Pay Details:

TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs.

As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

Line of Business:

Job Description:

Youwill be a core member of a high performing team of technology and riskprofessionalswho utilize their subject matter expertisein Identity and Access Management (IAM), technologycontrols,and informationand /cyber security risk management to provide effective guidance on a broad range of cybersecurityIAM-related policies, standards and controlsin compliance with the Enterprise Risk and Control Framework. As part of the Platforms and Technology (P&T)Global Risk and Compliance (GR&C)Asset Assessment Centre of Excellence (COE) team, you will play a key role in ensuringrequiredIAM risk and control assessmentsare completed efficiently and with quality/care

Meaningful work is fueled by meaningful performance and career development conversations with your manager. Here'ssome of what you may be asked to perform:

• Update the risk and control assessments tracker ona regular basis, and prepare weekly, monthly, and quarterly risk and operationalreportingfocused on IAM control testing status and findings.

• Conduct required IAM risk and control assessments and evaluate control procedure appropriateness, and .design and operating effectiveness, including identity lifecycle, access management, privileged access, authenticationand related controls.

• Guidepartners on a broad range of IAM and technology controls, as well asandinformation and cyber security programs, policies, and standards.

• Lead or contribute to the completion of risk and control design assessments for any assigned assetswithin the enterprise.

• Contribute to the definition, development, and oversight of a global security management strategy and framework, with a focus on identity and access governance.

• Ensure technology, processes, and governance are in place to monitor, detect, prevent, and react to both current and emerging IAM and technology and security threats against TDBG’s business.

• Contribute to the development of on-going technology and IAM risk reporting, monitoring key trendsand providing assurance that metrics to regularly measure control effectiveness for ownareaare met.

• Adhere to internal IAMpolicies and procedures, technology control standards, and applicable regulatory guidelines.

• Contribute collaboratively to the review of internal processes and activities and assistin identifyingpotential opportunities for improvementin IAM practices and governance.

• Adhere to, advise, oversee, monitorand enforce enterprise frameworks and methodologies that relate to technology controls, IAMandinformation security activities.

• Influence behavior to reduce risk and foster a strong technology risk management culture throughout the enterprise.

Depth & Scope:

• Participates on complex, comprehensive or large projects and initiatives

• Acts as a lead expert resource in technology controls / information security for project teams, the business / organization and/or outside vendors

• Has advanced knowledge of organization, technology controls / security/ risk issues

Education & Experience:

• Bachelor's degree preferred

• Information security certification / accreditation an asset

• 7+ years of relevant experience

• Expert knowledge of IT security and risk disciplines and practices

Preferred Qualifications :

• University degree.

• 2+ years of relevant experience in the area of IT risk, and technology, and/or information security, IAM control assessment/testing, and/or data analysis in a large organization.

• Hands-on experience assessing or testing Identity and Access Management controls.

• Working knowledge of IAM concepts, processes and common platforms (e.g. identity lifecycle management, PAM, MFA/SSO/federation, Active Directory / Entra ID, Ping Fed, CyberArk, and other equivalent IGA/PAM tools).

• Proficient with Microsoft Power Apps.

• Information Security Certification/Accreditation (e.g., CISA, CRISC, CISSP, CISM, or equivalent) (an asset).

• Skills to identify, assess, and monitor technology and IAM risks including information security, cyber security, access governance, resilience, operations/change management quality, data quality/security, and IT compliance.

• Advanced knowledge of one or more technology controls or security domains, with relevance to IAM disciplines and practices.

• Strong critical thinking - ability to decompose complex issues into manageable pieces.

• Ability to articulate ideas, share experiences and skills, and explain IAM findings clearly to both technical and non-technical audiences.

• Sound to advanced knowledge of business, technology controls, security, IAM, and risk issues.

• Firm commitment to staying informed/abreast of emerging cyber, and information security issues, IAM issues and industry trends.

• Strength in prioritizing and managing your own workload to deliver quality results and meet timelines with limited guidance of management.

• Knowledge of industry standards and best practices in the areas of technology, information and , information and, cyber security,access governance,and risk management and governance(e.g. NIST, ISO 27001, COBIT, SOX/ITGC frameworks).

• High flexibility and are comfortability ableworking in a fluid, changing environment.

• Strong communication, written and presentation skills (including production of clear, audit-ready documentation and evidence).

• Ability to multi-task and manage multiple team and client demands concurrently.

• Dedicated team player; comfortable with a dynamic work environment.

• Diligent and resourceful in research, evidence collection, and information gathering.

• Proficient with technology tools including Microsoft Power Apps, .

#TDCyberSecurity #Hybrid Onsite : Mount Laurel, NJ or Charlotte, NC

Physical Requirements:

Never: 0%; Occasional: 1-33%; Frequent: 34-66%; Continuous: 67-100%

• Domestic Travel - Occasional

• International Travel - Never

• Performing sedentary work - Continuous

• Performing multiple tasks - Continuous

• Operating standard office equipment - Continuous

• Responding quickly to sounds - Occasional

• Sitting - Continuous

• Standing - Occasional

• Walking - Occasional

• Moving safely in confined spaces - Occasional

• Lifting/Carrying (under 25 lbs.) - Occasional

• Lifting/Carrying (over 25 lbs.) - Never

• Squatting - Occasional

• Bending - Occasional

• Kneeling - Never

• Crawling - Never

• Climbing - Never

• Reaching overhead - Never

• Reaching forward - Occasional

• Pushing - Never

• Pulling - Never

• Twisting - Never

• Concentrating for long periods of time - Continuous

• Applying common sense to deal with problems involving standardized situations - Continuous

• Reading, writing and comprehending instructions - Continuous

• Adding, subtracting, multiplying and dividing - Continuous

The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all responsibilities, duties and skills required. The listed or specified responsibilities & duties are considered essential functions for ADA purposes.

Who We Are:

TD is one of the world's leading global financial institutions and is the fifth largest bank in North America by branches/stores. Every day, we strive to make every interaction, product, and experience remarkably human and refreshingly simple for over 27 million households and businesses in Canada, the United States and around the world. More than 95,000 TD colleagues bring their skills, talent, and creativity to foster deeper relationships, ensure disciplined execution, and build a simpler, faster banking experience. TD is deeply committed to being a leader in client experience, that is why we believe that all colleagues, no matter where they work, are client facing. Together, we are reimagining what banking can be for our clients, colleagues and communities.

Our Total Rewards Package

Our Total Rewards package reflects the investments we make in our colleagues to help them and their families achieve their financial, physical and mental well-being goals. Total Rewards at TD includes base salary and variable compensation/incentiveawards (e.g., eligibility for cash and/or equity incentive awards, generally through participation in an incentive plan) and several other key plans such as health and well-being benefits, savings and retirement programs, paid time off (including Vacation PTO, Flex PTO, and Holiday PTO), banking benefits and discounts, career development, and reward and recognition. Learn more

Additional Information:

We’re delighted that you’re considering building a career with TD. Through regular development conversations, training programs, and a competitive benefits plan, we’re committed to providing the support our colleagues need to thrive both at work and at home.

Colleague Development

If you’re interested in a specific career path or are looking to build certain skills, we want to help you succeed. You’ll have regular career, development, and performance conversations with your manager, as well as access to an online learning platform and a variety of mentoring programs to help you unlock future opportunities.

If you’re passionate about helping clients and building deep, lasting relationships, TD offers diverse career paths where you can grow your expertise and make a meaningful impact.

We're committed to your success and foster a respectful workplace where diverse perspectives are valued, everyone has fair opportunities to grow, and you can unlock your full potential to achieve your career goals. Here at TD, we hire and develop the best.

Training & Onboarding

We will provide training and onboarding sessions to ensure that you’ve got everything you need to succeed in your new role.

Interview Process

We’ll reach out to candidates of interest to schedule an interview. We do our best to communicate outcomes to all applicants by email or phone call.

Accommodation

TD Bank is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, status as a protected veteran or any other characteristic protected under applicable federal, state, or local law.

If you are an applicant with a disability and need accommodations to complete the application process, please email TD Bank US Workplace Accommodations Program at [email protected]. Include your full name, best way to reach you and the accommodation needed to assist you with the applicant process.