Work

Location:
Toronto, Ontario, Canada Hours: 37.5 Line of Business: Technology Solutions Pay Details: $69,700
- $98,400 CAD TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs. As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

Job Description

About This Role You will be a core member of a high performing team of technology and risk professionals who utilize their subject matter expertise in technology and information and cyber security risk management to provide effective guidance on a broad range of cyber security policies, standards and controls in compliance with the Enterprise Risk and Control Framework. As part of the Global Technology & Solutions (GTS) Protect organization, the Centre of Excellence (COE) Assessment team, you will play a key role in ensuring required risk and control assessments are completed efficiently and with quality/care. The role also supports standards governance, assessment quality assurance, guidance maintenance, strategic partner engagement, and continuous improvement of the end-to-end assessment process. Meaningful work is fueled by meaningful performance and career development conversations with your manager. Here’s some of what you may be asked to perform:



Standards Governance & Advisory Represent GTS CoE Assessments in Standards working groups and stakeholder forums, perform preliminary analysis of proposed standard changes, and track related actions and follow-ups. Assess and challenge standard requirements for relevance to CGAs, support updates to CGA Guidance and related documentation, and help maintain traceability between standards, control requirements, guidance, and assessment requirements. Guide partners on a broad range of technology controls and information and cyber security programs, policies, and standards. Contribute to the definition, development, and oversight of a global security management strategy and framework. Contribute collaboratively to the review of internal processes and activities and assist in identifying potential opportunities for improvement. Support simplification and modernization of the CGA process through automation research, process mapping, documentation, assessor training, knowledge repositories, and identification of recurring assessment pain points. Adhere to, advise, oversee, monitor and enforce enterprise frameworks and methodologies that relate to technology controls and information security activities. Contributes to the ongoing evolution of the GTS CoE Assessment operating model and implementation of strategic process enhancements. Support stronger end-to-end assessment governance by improving process ownership,



quality-control mechanisms, consistency of execution, and alignment between standards, guidance, and assessment practices. Strengthening relationships with Standards teams and stakeholders, provide proactive risk guidance, and act as a trusted advisor on control and assessment-related matters. Assessment Execution & Risk Review Conduct: Technology Asset Risk Assessments (TARAs), Control Gap Assessments (CGAs), perform Quality Assurance reviews of risk assessments, and support assessment planning, coordination, documentation, evidence tracking, stakeholder follow-ups, and remediation activities. Conduct risk and control assessments and evaluate the appropriate control procedure. Interpret and communicate technology control and information security requirements arising from regulatory obligations, industry frameworks, internal policies and standards, and security best practices. Lead or contribute to the completion of risk and control design assessments for any assigned assets within the enterprise. Ensure technology, processes, and governance are in place to monitor, detect, prevent, and react to both current and emerging technology and security threats against TDBG's business. Reporting & Continuous Improvement Monitor assessment trends and emerging risk themes and help define and refine metrics that measure effectiveness and assessment quality, consistency, and efficiency. Influence behavior to reduce risk and foster a solid technology risk management culture throughout the enterprise. Contribute to the development of on-going technology risk reporting, monitoring key trends and providing assurance that metrics to regularly measure control effectiveness for own area are met.

What can you

📌 Information Security Analyst II (Toronto)
🏢 The Toronto-Dominion Bank (Canada)
📍 Toronto