Work Location:
Toronto, Ontario, Canada

Hours:
37.5

Line of Business:
Risk Management

Pay Details:
96,900.00 - 136,800.00 CAD

TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs.

As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

Job Description:

Department Overview

The Second Line of Defense (2LoD) independent Operational Risk Management (ORM) Technology and Cyber Security Risk Management (TCRM) team works in partnership with the business units and corporate groups of TD Bank Group to further the understanding and management of technology and cybersecurity risks across the enterprise.

2LoD TCRM provides independent oversight and challenge to operational risk management activities executed by the Technology organization and business groups across the enterprise. They partner with the First Line of Defense (CIO & CISO organizations) in identifying, reporting, and mitigating Technology and Cybersecurity risk issues and provide subject matter expertise in Cybersecurity risk management practices. The group executes 2A requirements in support of the 3 lines of defense framework.

Job Description

The Technology and Cybersecurity Risk Management (TCRM) Specialist will partner with the first line of defense and other second line of defense teams to oversee and challenge the execution of risk management activities and leading practices/technologies used to keep up with the constantly evolving cyber threat landscape.

Reporting to the Senior Manager, Technology and Cybersecurity Risk Management (TCRM), this role will have the following accountabilities:

• Support the oversight and independent challenge of Technology and Cybersecurity risk management activities for the Enterprise such as Cyber Scenario analysis, End User Computing, Business management Technology, Third Party and Cyber Supply Chain Risk Management, Digital Crown Jewels, Process Risk and Control-Assessment (pRCSA), Controls testing, Technology Risk Assessments.
• Address requests from regulators, auditors, senior management, and other stakeholder groups.
• Execute 2nd line challenge activities required to support the ORM Framework, including but not limited to:
  • Technology and Cybersecurity risks linked to and process RCSA (pRCSA) across Business Technology Solutions teams with a strong focus on the CISO organization;
  • Cybersecurity risk scenario analysis;
  • Internal and External cyber event analysis;
  • Key Risk Indicators, and;
  • Other areas as appropriate to support the technology areas in risk management.
• Effectively communicate risk management practices and methodologies and results of risk assessments to Executive and senior management in a supportive and collaborative manner and influence risk-based remediation.
• Be a positive team player to consistently maintain high levels of integrity, motivation, and morale.
• Will be required to keep abreast of Technology and Cybersecurity emerging risks, the evolving Cyber threat landscape, best practices to address/mitigate Cybersecurity risks, and applicable Regulatory and Compliance requirements.
• Position will deal with senior management in technology areas and technology risk professionals.
• Conduct appropriate assessment of Technology for risk identification, assessment, reporting, and monitoring based on a risk-based methodology in areas such as:
  • Cybersecurity control/process adequacy,
  • Technology risk assessments,
  • Controls Testing and related processes,
  • Third Party and Cyber Supply Chain Risk Management,
  • End User Computing,
  • Business Managed Technology, and
  • PCI Compliance

This role is looking for a highly seasoned professional with experience in Technology and Cyber security risk management.

Job Requirements

• Experience in the Cybersecurity, and/or Technology Risk Management, or Internal Audit field.
• An understanding of regulatory and Controls requirements: PCI, FFIEC, SOX, HIPAA, ISO 2700x and NIST standards.
• Ability to work in ambiguity must be flexible to deal with changes in a fast paced and new environment, working closely with peers where subject matter expertise is required.
• Organizationally astute, with superior influencing, collaboration, and communication skills.
• Experience assessing risk and challenging the status quo.
• Proven ability to foster a cohesive team and promote a positive, high performing work environment.
• Expertise in working effectively in teams - requires a track record of knowledge across the organization.
• Strong analytical skills, including segment risk analysis, data analysis, and comparative analysis.
• In order to provide effective oversight and independent challenge the role requires the candidate to have a good understanding of the following areas:
  • Risk management frameworks and methodologies;
  • Cybersecurity frameworks, operations, processes, controls, and tools;
  • Technology operations and processes;
  • Infrastructure and application security domains;
  • Cloud service provider management, and;
  • Regulatory requirements.
• Strong business and financial acumen.

Education & Accreditation

• This role requires successful completion of all three levels of TD Operational Risk Management certification. Certification is not a requirement to apply for this role. The successful candidate will have 12 months from the start date in the role to complete required certifications. The required courses are available internally through TD Operational Risk Management.
• Undergraduate degree in Computer Science/Computer Engineering/Risk Management is an asset.
• Accreditation such as CISSP, CCSP, CISA, CISM, CRISC, and/or similar is preferred.

Our Total Rewards Package
Our Total Rewards package reflects the investments we make in our colleagues to help them and their families achieve their financial, physical, and mental well-being goals. Total Rewards at TD includes a base salary, variable compensation, and several other key plans such as health and well-being benefits, savings and retirement programs, paid time off, banking benefits and discounts, career development, and reward and recognition programs. Learn more

Additional Information:
Please be advised that this job opportunity is subject to provincial regulation for employment purposes. It is imperative to acknowledge that each province or territory within the jurisdiction of Canada may have its own set of regulations, requirements.

Colleague Development

If you're interested in a specific career path or are looking to build certain skills, we want to help you succeed. You'll have regular career, development, and performance conversations with your manager, as well as access to an online learning platform and a variety of mentoring programs to help you unlock future opportunities.

If you're passionate about helping clients and building deep, lasting relationships, TD offers diverse career paths where you can grow your expertise and make a meaningful impact.

We're committed to your success and foster a respectful workplace where diverse perspectives are valued, everyone has fair opportunities to grow, and you can unlock your full potential to achieve your career goals. Here at TD, we hire and develop the best.

Training & Onboarding
We will provide training and onboarding sessions to ensure that you've got everything you need to succeed in your new role.

Interview Process
We'll reach out to candidates of interest to schedule an interview. We do our best to communicate outcomes to all applicants by email or phone call.

Accommodation
Your accessibility is important to us. Please let us know if you'd like accommodations (including accessible meeting rooms, captioning for virtual interviews, etc.) to help us remove barriers so that you can participate throughout the interview process.

We look forward to hearing from you!

Language Requirement (Quebec only):
Sans Objet