Information Security Specialist

Posted 42 minutes ago

Apply Now

Resume Score

Check how well your resume matches this job before you apply.

Sign in to check score

About the role

  • Information Security Specialist strengthening technology controls, security governance, and risk management at TD, a major North American bank. Advising partners, assessing controls, supporting audits, and responding to incidents.

Responsibilities

  • Provide consultation and advice on Technology Controls and Information Security programs, policies, standards, and incidents
  • Conduct project consulting on risk assessments, required controls, control procedures, vulnerability assessments, and related areas
  • Lead or contribute to risk and control design assessments for application portfolios
  • Document control gaps, business and enterprise impact, risk mitigation, and remediation plans
  • Contribute to the global security management strategy and framework
  • Monitor, detect, prevent, and respond to current and emerging technology and security threats
  • Develop ongoing Technology Risk reporting, monitor trends, and define control-effectiveness metrics
  • Ensure technology security components are integrated into the Bank’s Enterprise Architecture and address control gaps
  • Consult on regulatory compliance requirements and support audits and management responses
  • Participate in computer security incident responses and represent business and enterprise positions
  • Review internal processes, identify improvement opportunities, and oversee technology control and information security frameworks
  • Influence behavior and foster a strong technology risk management culture
  • Manage relationships with Technology, business, corporate, and control functions
  • Assess and escalate key issues to appropriate stakeholders
  • Participate in cross-functional and enterprise initiatives as a subject matter expert
  • Develop or contribute to complex reporting, analysis, and assessments
  • Prioritize workload, meet timelines, support teamwork, and communicate issues
  • Recommend opportunities to improve productivity, effectiveness, and operational efficiency
  • Establish relationships with business and technology partners, program managers, and project managers
  • Participate in knowledge transfer within the team and business units
  • Act as a lead expert resource in technology controls and information security
  • Generally report to a Senior Manager or above

Requirements

  • University degree
  • 7+ years of relevant experience
  • Information security certification / accreditation an asset
  • Industry certificates such as CISSP/CCSP/CRISC/CISM are strongly preferred
  • Expert knowledge of IT security and risk disciplines and practices
  • Advanced knowledge of organization, technology controls, security, and risk issues
  • Knowledge of emerging issues, industry trends, and regulatory requirements
  • Ability to define, develop, implement, and manage security standards, policies, procedures, and solutions
  • Ability to conduct risk and control design assessments, vulnerability assessments, and technology risk reporting
  • Ability to consult on regulatory compliance, audits, incident response, and remediation activities
  • Ability to establish relationships across technology, business, corporate, and control functions

Benefits

  • Base salary
  • Variable compensation
  • Health and well-being benefits
  • Savings and retirement programs
  • Paid time off
  • Banking benefits and discounts
  • Career development
  • Reward and recognition programs
  • Regular career, development, and performance conversations
  • Online learning platform
  • Mentoring programs
  • Training and onboarding sessions
  • Accessibility accommodations during the interview process

Job type

Full Time

Experience level

SeniorLead

Salary

CA$96,900 - CA$136,800 per year

Degree requirement

Bachelor's Degree

Location requirements

OnsiteTorontoCanada

Report this job

Found something wrong with the page? Please let us know by submitting a report below.