Information Security Analyst

Work Location:

Hours:

Line of Business:

Pay Details:

TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidates skills and experience job-related knowledge geographic location and other specific business and organizational needs.

As a candidate you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

Job Description:

Job Description Summary

Define develop and implement Technology Controls and Information Security-related policies programs standards processes and tools. Provide specialized expertise and guidance on assessing risks identifying control gaps and developing appropriate solutions to mitigate risk and protect the Bank.

The role provides subject matter expertise for the Banks End-User Computing governance program including asset classification attestation risk and control assessments thematic remediation high-risk mitigation standards enhancement stakeholder guidance governance reporting learning content and intake management. The role may participate in projects of moderate to high complexity and provide complex reporting analysis and assessments at the functional business-line or enterprise level.

Job Description

KEY ACCOUNTABILITIES

• Provide consultation and advice to business technology and control partners on End-User Computing governance information security requirements policies standards processes and controls.
• Serve as an EUC risk and technology subject matter expert helping stakeholders understand asset classification registration attestation risk assessment control and remediation requirements.
• Conduct or support Inherent Risk Assessments and Control Gap Assessments document identified risks and control gaps and provide practical guidance on remediation strategies.
• Coordinate the intake review prioritization and assignment of EUC-related requests ensuring stakeholders receive timely and consistent guidance.
• Develop and maintain EUC governance content guidance procedures learning materials and knowledge resources through approved collaboration platforms.
• Lead or support stakeholder engagement sessions office hours and knowledge-sharing activities to promote understanding and consistent application of EUC requirements.
• Establish effective relationships across business technology program project and control functions to support risk-based decision-making and timely issue resolution.

• Maintain the integrity and quality of the EUC Book of Record through asset classification attestation campaigns ongoing monitoring data-quality reviews and assessment of asset changes and risk indicators.
• Lead or contribute to risk and control design assessments clearly documenting the impact of control gaps on the business and the Bank and supporting the development of risk-mitigation and remediation plans.
• Support thematic analysis and remediation activities by identifying common risk patterns determining affected populations tracking corrective actions and escalating material issues where required.
• Support mitigation of Functionally High-Risk EUC assets and EUC assets subject to Payment Card Industry requirements including risk identification control-gap analysis action tracking stakeholder engagement and management reporting.
• Contribute to the definition review enhancement and implementation of EUC security standards controls procedures and supporting governance processes.
• Develop ongoing EUC risk reporting and monitor Key Performance Indicators and Key Risk Indicators to measure program performance risk exposure remediation progress and control effectiveness.
• Perform or support quality assurance and quality control reviews to promote the accuracy completeness and consistency of EUC classifications assessments control determinations and reporting.
• Provide support and consultation for internal audits regulatory examinations compliance reviews and management responses including the coordination and tracking of remediation activities.
• Consult on regulatory and compliance requirements reporting and information requests related to EUC governance.
• Monitor emerging technology security regulatory and industry developments and assess their potential impact on the Banks EUC governance and control environment.
• Identify key risks and issues and escalate them to the appropriate stakeholders and levels of management.
• Adhere to and support the oversight monitoring and enforcement of enterprise frameworks methodologies policies procedures technology-control standards and applicable regulatory guidelines.
• Maintain a strong culture of risk management and control supported by effective processes sound governance and alignment with the Banks risk appetite.

• Continuously enhance knowledge and expertise in EUC governance technology risk information security regulatory requirements and industry practices.
• Prioritize and manage individual workload to deliver accurate high-quality results within assigned timelines.
• Support a positive work environment that promotes service quality innovation inclusion collaboration and teamwork.
• Communicate issues risks dependencies and points of interest to team members and stakeholders in a timely manner.
• Identify and recommend opportunities to improve productivity control effectiveness stakeholder experience and operational efficiency.
• Participate in knowledge transfer documentation training and learning activities within the team and across supported business areas.
• Contribute specialized expertise to business-specific cross-functional and enterprise initiatives.
• Influence stakeholder behaviour to reduce risk and promote a strong technology risk management culture throughout the organization.BREADTH & DEPTH
• Advanced knowledge of one or more technology-control information-security risk-management or governance domains disciplines and practices.
• Strong understanding of technology risk control design risk assessment issue management remediation and governance reporting.
• Ability to analyze complex information identify risk themes and control gaps and communicate findings and recommendations clearly.
• Ability to interpret and apply policies standards control requirements and regulatory expectations within a business and technology environment.
• Ability to work independently as an individual contributor while collaborating effectively across business technology risk compliance audit and control functions.
• May participate in projects and initiatives of moderate to high complexity.
• Acts as a key resource and subject matter expert within a specialized technology information security or governance area.
• May develop or contribute to complex reporting analysis assessments procedures standards and management presentations at the functional business-line or enterprise level.
• Generally reports to a Manager or Senior Manager.

EXPERIENCE & EDUCATION

Required:

• University degree or equivalent relevant education and professional experience.
• Experience in information security technology risk governance risk assessment control assessment or a related discipline.
• Experience conducting risk assessments analyzing control gaps documenting risk impacts and supporting remediation activities.
• Strong stakeholder consultation analytical written communication and presentation skills.
• Ability to interpret technology-control information-security governance and regulatory requirements and translate them into practical guidance.
• Ability to manage multiple priorities independently and deliver accurate high-quality results within established timelines.
• Ideally 5 or more years of work experience with 2 years of experience in End User Computing Risk Assessment preferably in Financial Industry.

Preferred:

• Experience within financial services or another highly regulated industry.
• Experience supporting End-User Computing governance asset governance asset classification attestation or related technology-risk programs.
• Experience using ServiceNow or a comparable governance risk and compliance platform.
• Experience developing management reporting dashboards Key Performance Indicators or Key Risk Indicators.
• Experience maintaining SharePoint or comparable knowledge-management content and developing governance guidance procedures or learning materials.

Who We Are:

TD is one of the worlds leading global financial institutions and is the fifth largest bank in North America by branches/stores. Every day we strive to make every interaction product and experience remarkably human and refreshingly simple for over 27 million households and businesses in Canada the United States and around the world. More than 95000 TD colleagues bring their skills talent and creativity to foster deeper relationships ensure disciplined execution and build a simpler faster banking experience. TD is deeply committed to being a leader in client experience that is why we believe that all colleagues no matter where they work are client facing. Together we are reimagining what banking can be for our clients colleagues and communities.

Our Total Rewards Package
Our Total Rewards package reflects the investments we make in our colleagues to help them and their families achieve their financial physical and mental well-being goals. Total Rewards at TD includes a base salary variable compensation and several other key plans such as health and well-being benefits savings and retirement programs paid time off banking benefits and discounts career development and reward and recognition programs. Learn more

Additional Information:
Were delighted that youre considering building a career with TD. Through regular development conversations training programs and a competitive benefits plan were committed to providing the support our colleagues need to thrive both at work and at home.

Please be advised that this job opportunity is subject to provincial regulation for employment purposes. It is imperative to acknowledge that each province or territory within the jurisdiction of Canada may have its own set of regulations requirements.

Colleague Development

If youre interested in a specific career path or are looking to build certain skills we want to help you succeed. Youll have regular career development and performance conversations with your manager as well as access to an online learning platform and a variety of mentoring programs to help you unlock future opportunities.

If youre passionate about helping clients and building deep lasting relationships TD offers diverse career paths where you can grow your expertise and make a meaningful impact.

Were committed to your success and foster a respectful workplace where diverse perspectives are valued everyone has fair opportunities to grow and you can unlock your full potential to achieve your career goals. Here at TD we hire and develop the best.

Training & Onboarding
We will provide training and onboarding sessions to ensure that youve got everything you need to succeed in your new role.

Interview Process
Well reach out to candidates of interest to schedule an interview. We do our best to communicate outcomes to all applicants by email or phone call.

Accommodation
Your accessibility is important to us. Please let us know if youd like accommodations (including accessible meeting rooms captioning for virtual interviews etc.) to help us remove barriers so that you can participate throughout the interview process.

We look forward to hearing from you!

Language Requirement (Quebec only):