Work Location:Toronto, Ontario, Canada
Hours:37.5
Line of Business:Technology Solutions
Pay Details:$96,900 - $136,800 CAD
TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs.
As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.
Job Description:About the EUC Governance Team
The End User Computing (EUC) Governance team provides enterprise oversight and governance of business-developed or business-managed applications and tools-including spreadsheets, databases, scripts and other user-developed solutions-that may introduce operational, technology or information security risk.
In this context, EUC refers to governed business applications and tools and does not refer to end-user devices, laptops, desktops or endpoint technology.The team is responsible for the enterprise EUC governance framework, inventory, risk and control processes, supporting technology capabilities and reporting. The team partners closely with business segments, Technology, Information Security and Risk teams to identify, assess, manage and monitor EUC risk across the Bank.
Job DescriptionThe Manager, Information Security will report to and work closely with the
Head of EUC Governance, supporting the execution and continued evolution of the enterprise EUC Governance strategy and program. The role will have primary responsibility for driving the deployment, adoption and ongoing evolution of
EUC governance technology solutions, acting as a subject matter expert for the solutions, their capabilities and supporting constructs.
The Manager will serve as a key interface between EUC Governance, Technology, Information Security, Risk and business segments, translating governance strategy, risk and control objectives, and business needs into clear product requirements and delivery priorities. The role will manage product roadmaps, drive progressive enterprise adoption, support EUC inventory and governance operations, and provide insights and recommendations to support program direction and decision-making.
Key Accountabilities- Lead the progressive deployment, adoption and expansion of EUC governance technology solutions across business segments, engaging segment leaders to assess readiness, establish deployment plans, address adoption barriers and drive sustainable enterprise consumption.
- Act as a subject matter expert for EUC governance technology solutions, maintaining a strong understanding of platform capabilities, workflows, integrations, controls and business processes and providing guidance to stakeholders across the enterprise.
- Proactively identify enhancements and new capabilities based on governance priorities, segment feedback, operational insights and emerging needs; develop and prioritize requirements and partner with Technology and external vendors on solution delivery, issue resolution and product evolution.
- Develop, maintain and manage product roadmaps in alignment with the strategic direction and priorities established by the Head of EUC Governance, balancing business needs, information security and control requirements, technology dependencies, risks and enterprise adoption objectives.
- Oversee key EUC inventory and governance operations, including system interactions, inventory and data-quality processes, attestation control execution, workflow management, reporting and continuous improvement.
- Support the Head of EUC Governance in executing the enterprise EUC strategy and key priorities, providing recommendations, insights and execution support and representing the EUC Governance function with business, Technology, Information Security, Risk and segment stakeholders as required.
Job Requirements / Responsibilities- Lead the identification, analysis, documentation, prioritization and validation of high-level and detailed business, functional, information security and control requirements, translating EUC Governance objectives into actionable requirements, user stories and acceptance criteria for Technology delivery.
- Partner closely with Technology, Architecture, Information Security, Risk, Product and business teams throughout the Product Development Life Cycle (PDLC), supporting solution design, build, testing, release, deployment and ongoing enhancement while maintaining clear accountability between business requirements and Technology delivery.
- Apply established product management and PDLC practices across Agile, Scaled Agile and Waterfall delivery environments and maintain product roadmaps and delivery artifacts using tools such as Jira, Confluence and Microsoft Project.
- Lead business validation, implementation readiness, issue management and post-deployment stabilization, and manage day-to-day product and delivery relationships with external technology vendors, partnering with Technology to drive issue resolution and successful delivery outcomes.
- Support the Head of EUC Governance in the development and evolution of program KPIs, KRIs and performance measures; operationalize ongoing measurement and reporting, monitor trends and thresholds, and identify emerging risks, performance gaps and opportunities requiring management attention.
- Support and facilitate reviews, assessments and assurance activities across the 1st, 2nd and 3rd Lines of Defense, coordinating stakeholder engagement, documentation and evidence requirements, responding to inquiries and observations, and supporting remediation activities and sustainable closure of findings and commitments.
Required Skills, Experience & Success Factors- Strong experience in information security, technology risk, governance, product management or technology delivery within a large and complex organization; financial services or other highly regulated industry experience is preferred.
- Strong understanding of technology risk and control concepts, including inventory management, risk assessment, control monitoring, data quality, attestation and ongoing governance. Knowledge of EUC risk and governance practices, including discovery and classification, is considered a strong asset.
- Experience with technology risk, governance, discovery, inventory, monitoring or risk-management platforms and their enterprise deployment and adoption. Knowledge of EUC governance solutions such as CIMCON, ClusterSeven/SAI360, Spark, Archer or comparable technologies is considered a strong asset.
- Demonstrated experience translating information security, risk, control and business needs into technology requirements and partnering with Technology teams throughout solution design, development, testing, implementation and ongoing enhancement.
- Strong knowledge of product management, PDLC and delivery methodologies, including Agile/Scaled Agile and Waterfall. Experience with Jira, Confluence, Microsoft Project, ServiceNow or comparable product, workflow and delivery-management tools is preferred.
- Relevant post-secondary education in Information Security, Computer Science, Technology, Risk Management, Business or a related discipline, or equivalent relevant experience.
- Professional certifications such as CISSP, CISM, CRISC, PMP, PMI-ACP or equivalent are considered assets.
- Strong leadership, stakeholder management, analytical and communication capabilities are critical to success.
