Work Location: Toronto, Ontario, Canada

Hours: 37.5

Line of Business: Technology Solutions

Pay Details:

$115,600 - $163,200 CAD

TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate’s skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs.

Job Description:

Department Overview

Our purpose: The Global Security & Defence AI Security Governance function helps TD adopt artificial intelligence securely and responsibly by translating enterprise security, technology risk and regulatory expectations into practical guidance and controls.

Our people. You will partner with business leaders, technology teams, service and platform owners, control functions and regulatory stakeholders across the enterprise.

Our impact. Your work will influence high-profile, complex and high-risk AI initiatives, strengthen enterprise AI governance and help business partners manage risk within appetite while achieving their objectives.

Job Details - What You’ll Do

As the Senior Business Information Security Officer for AI, you will connect emerging AI risks with clear, business-focused decisions. You will help teams design, assess and operate AI capabilities securely, while strengthening enterprise governance, regulatory readiness and risk visibility.

Shape secure AI strategy





- Lead the development and implementation of AI security strategies, standards, policies and control expectations that align with enterprise architecture, business priorities and regulatory requirements.Provide technical leadership and expert consultation on technology controls, information security programs, policies, standards, and incidents.

Guide risk-based decisions

- Advise business and technology partners on AI risk, control design and risk; clearly articulate control gaps, business impact, mitigation options and escalation needs.

Assess complex AI solutions

- Lead risk and control design assessments across AI applications, models, agents, third parties, infrastructure and supporting platforms, including vulnerability and control procedure reviews to validate security and technology controls are implemented to support business requirements.

Governance and oversight

- Oversee AI security governance, key risk reporting, control effectiveness metrics and remediation plans; lead governance forums and drive accountable outcomes across stakeholders.

Prepare for emerging threats

- Monitor AI threat trends, adversarial techniques, regulatory developments and industry practices, and translate them into practical improvements to monitoring, prevention, detection, response and resilience.
- Develop, provide,



or contribute to complex reporting, analysis, and assessments at the functional or enterprise level.

Influence and enable the enterprise

- Build trusted relationships across business, technology and control functions; deliver executive-ready advice and awareness that makes complex AI risk understandable and fosters a robust risk management culture.
- Act as a primary technical expert, working with technology partners and service/platform owners to integrate security components into enterprise architecture.

Job Requirements - What You Need to Succeed

We value a range of experiences and perspectives. If your background is relevant but does not match every preferred qualification, we encourage you to apply.

Required

- University degree or equivalent relevant professional experience.
- 10+ years of relevant experience in information security, technology risk, cloud security, cyber risk, enterprise security architecture or a related discipline.
- Experience applying recognized AI risk and governance frameworks, such as the NIST AI Risk Management Framework, ISO/IEC 23894, ISO/IEC 42001, OWASP or MITRE guidance.
- Demonstrated experience leading risk and control assessments for complex or high-risk technology initiatives and translating findings into practical mitigation and remediation plans.
- Demonstrated knowledge of AI security and risk, including secure AI development, model or agent risks, validation, monitoring, explainability, robustness and adversarial threats.
- Experience integrating AI security controls into enterprise architecture, technology platforms and third-party

📌 Senior Information Security Specialist (Ottawa)
🏢 TD
📍 Ottawa