Information Security Specialist (US) Risk Controls & Governance
Sign up free to see how well your resume matches this role.
What you'll do
- Update the risk and control assessments tracker on a regular basis, and prepare weekly, monthly, and quarterly risk and operational reporting focused on IAM control testing status and findings.
- Conduct required IAM risk and control assessments and evaluate control procedure appropriateness, and .design and operating effectiveness, including identity lifecycle, access management, privileged access, authentication and related controls.
- Guide partners on a broad range of IAM and technology controls, as well as and information and cyber security programs, policies, and standards.
- Lead or contribute to the completion of risk and control design assessments for any assigned assets within the enterprise.
- Contribute to the definition, development, and oversight of a global security management strategy and framework, with a focus on identity and access governance.
- Ensure technology, processes, and governance are in place to monitor, detect, prevent, and react to both current and emerging IAM and technology and security threats against TDBG’s business.
- Contribute to the development of on-going technology and IAM risk reporting, monitoring key trends and providing assurance that metrics to regularly measure control effectiveness for own area are met.
- Adhere to internal IAM policies and procedures, technology control standards, and applicable regulatory guidelines.
- Contribute collaboratively to the review of internal processes and activities and assist in identifying potential opportunities for improvement in IAM practices and governance.
- Adhere to, advise, oversee, monitor and enforce enterprise frameworks and methodologies that relate to technology controls, IAM and information security activities.
- Influence behavior to reduce risk and foster a strong technology risk management culture throughout the enterprise.
What they're looking for
- Bachelor's degree preferred
- Information security certification / accreditation an asset
- 7+ years of relevant experience
- Expert knowledge of IT security and risk disciplines and practices
Nice to have
- University degree.
- 2+ years of relevant experience in the area of IT risk, and technology, and/or information security, IAM control assessment/testing, and/or data analysis in a large organization.
- Hands-on experience assessing or testing Identity and Access Management controls.
- Working knowledge of IAM concepts, processes and common platforms (e.g. identity lifecycle management, PAM, MFA/SSO/federation, Active Directory / Entra ID, Ping Fed, CyberArk, and other equivalent IGA/PAM tools).
- Proficient with Microsoft Power Apps.
- Information Security Certification/Accreditation (e.g., CISA, CRISC, CISSP, CISM, or equivalent) (an asset).
- Skills to identify, assess, and monitor technology and IAM risks including information security, cyber security, access governance, resilience, operations/change management quality, data quality/security, and IT compliance.
- Advanced knowledge of one or more technology controls or security domains, with relevance to IAM disciplines and practices.
Summarised by NextRaise from the employer’s description, which follows in full below.
Full description from employer
Work Location:
Mount Laurel, New Jersey, United States of AmericaHours:
40Pay Details:
$98,160 - $159,270 USDTD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs.
As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.
Line of Business:
Technology SolutionsJob Description:
You will be a core member of a high performing team of technology and risk professionals who utilize their subject matter expertise in Identity and Access Management (IAM), technology controls, and information and /cyber security risk management to provide effective guidance on a broad range of cyber security IAM-related policies, standards and controls in compliance with the Enterprise Risk and Control Framework. As part of the Platforms and Technology (P&T) Global Risk and Compliance (GR&C) Asset Assessment Centre of Excellence (COE) team, you will play a key role in ensuring required IAM risk and control assessments are completed efficiently and with quality/care
Meaningful work is fueled by meaningful performance and career development conversations with your manager. Here's some of what you may be asked to perform:
Update the risk and control assessments tracker on a regular basis, and prepare weekly, monthly, and quarterly risk and operational reporting focused on IAM control testing status and findings.
Conduct required IAM risk and control assessments and evaluate control procedure appropriateness, and .design and operating effectiveness, including identity lifecycle, access management, privileged access, authentication and related controls.
Guide partners on a broad range of IAM and technology controls, as well as and information and cyber security programs, policies, and standards.
Lead or contribute to the completion of risk and control design assessments for any assigned assets within the enterprise.
Contribute to the definition, development, and oversight of a global security management strategy and framework, with a focus on identity and access governance.
Ensure technology, processes, and governance are in place to monitor, detect, prevent, and react to both current and emerging IAM and technology and security threats against TDBG’s business.
Contribute to the development of on-going technology and IAM risk reporting, monitoring key trends and providing assurance that metrics to regularly measure control effectiveness for own area are met.
Adhere to internal IAM policies and procedures, technology control standards, and applicable regulatory guidelines.
Contribute collaboratively to the review of internal processes and activities and assist in identifying potential opportunities for improvement in IAM practices and governance.
Adhere to, advise, oversee, monitor and enforce enterprise frameworks and methodologies that relate to technology controls, IAM and information security activities.
Influence behavior to reduce risk and foster a strong technology risk management culture throughout the enterprise.
Depth & Scope:
Participates on complex, comprehensive or large projects and initiatives
Acts as a lead expert resource in technology controls / information security for project teams, the business / organization and/or outside vendors
Has advanced knowledge of organization, technology controls / security/ risk issues
Education & Experience:
Bachelor's degree preferred
Information security certification / accreditation an asset
7+ years of relevant experience
Expert knowledge of IT security and risk disciplines and practices
Preferred Qualifications :
University degree.
2+ years of relevant experience in the area of IT risk, and technology, and/or information security, IAM control assessment/testing, and/or data analysis in a large organization.
Hands-on experience assessing or testing Identity and Access Management controls.
Working knowledge of IAM concepts, processes and common platforms (e.g. identity lifecycle management, PAM, MFA/SSO/federation, Active Directory / Entra ID, Ping Fed, CyberArk, and other equivalent IGA/PAM tools).
Proficient with Microsoft Power Apps.
Information Security Certification/Accreditation (e.g., CISA, CRISC, CISSP, CISM, or equivalent) (an asset).
Skills to identify, assess, and monitor technology and IAM risks including information security, cyber security, access governance, resilience, operations/change management quality, data quality/security, and IT compliance.
Advanced knowledge of one or more technology controls or security domains, with relevance to IAM disciplines and practices.
Strong critical thinking - ability to decompose complex issues into manageable pieces.
Ability to articulate ideas, share experiences and skills, and explain IAM findings clearly to both technical and non-technical audiences.
Sound to advanced knowledge of business, technology controls, security, IAM, and risk issues.
Firm commitment to staying informed/abreast of emerging cyber, and information security issues, IAM issues and industry trends.
Strength in prioritizing and managing your own workload to deliver quality results and meet timelines with limited guidance of management.
Knowledge of industry standards and best practices in the areas of technology, information and , information and, cyber security, access governance, and risk management and governance(e.g. NIST, ISO 27001, COBIT, SOX/ITGC frameworks).
High flexibility and are comfortability able working in a fluid, changing environment.
Strong communication, written and presentation skills (including production of clear, audit-ready documentation and evidence).
Ability to multi-task and manage multiple team and client demands concurrently.
Dedicated team player; comfortable with a dynamic work environment.
Diligent and resourceful in research, evidence collection, and information gathering.
Proficient with technology tools including Microsoft Power Apps, .
#TDCyberSecurity #Hybrid Onsite : Mount Laurel, NJ or Charlotte, NC
Physical Requirements:
Never: 0%; Occasional: 1-33%; Frequent: 34-66%; Continuous: 67-100%
Domestic Travel – Occasional
International Travel – Never
Performing sedentary work – Continuous
Performing multiple tasks – Continuous
Operating standard office equipment - Continuous
Responding quickly to sounds – Occasional
Sitting – Continuous
Standing – Occasional
Walking – Occasional
Moving safely in confined spaces – Occasional
Lifting/Carrying (under 25 lbs.) – Occasional
Lifting/Carrying (over 25 lbs.) – Never
Squatting – Occasional
Bending – Occasional
Kneeling – Never
Crawling – Never
Climbing – Never
Reaching overhead – Never
Reaching forward – Occasional
Pushing – Never
Pulling – Never
Twisting – Never
Concentrating for long periods of time – Continuous
Applying common sense to deal with problems involving standardized situations – Continuous
Reading, writing and comprehending instructions – Continuous
Adding, subtracting, multiplying and dividing – Continuous
The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all responsibilities, duties and skills required. The listed or specified responsibilities & duties are considered essential functions for ADA purposes.
Who We Are:
TD is one of the world's leading global financial institutions and is the fifth largest bank in North America by branches/stores. Every day, we strive to make every interaction, product, and experience remarkably human and refreshingly simple for over 27 million households and businesses in Canada, the United States and around the world. More than 95,000 TD colleagues bring their skills, talent, and creativity to foster deeper relationships, ensure disciplined execution, and build a simpler, faster banking experience. TD is deeply committed to being a leader in client experience, that is why we believe that all colleagues, no matter where they work, are client facing. Together, we are reimagining what banking can be for our clients, colleagues and communities.
Our Total Rewards Package
Our Total Rewards package reflects the investments we make in our colleagues to help them and their families achieve their financial, physical and mental well-being goals. Total Rewards at TD includes base salary and variable compensation/incentive awards (e.g., eligibility for cash and/or equity incentive awards, generally through participation in an incentive plan) and several other key plans such as health and well-being benefits, savings and retirement programs, paid time off (including Vacation PTO, Flex PTO, and Holiday PTO), banking benefits and discounts, career development, and reward and recognition. Learn more
Additional Information:
We’re delighted that you’re considering building a career with TD. Through regular development conversations, training programs, and a competitive benefits plan, we’re committed to providing the support our colleagues need to thrive both at work and at home.
Colleague Development
If you’re interested in a specific career path or are looking to build certain skills, we want to help you succeed. You’ll have regular career, development, and performance conversations with your manager, as well as access to an online learning platform and a variety of mentoring programs to help you unlock future opportunities.
If you’re passionate about helping clients and building deep, lasting relationships, TD offers diverse career paths where you can grow your expertise and make a meaningful impact.
We're committed to your success and foster a respectful workplace where diverse perspectives are valued, everyone has fair opportunities to grow, and you can unlock your full potential to achieve your career goals. Here at TD, we hire and develop the best.
Training & Onboarding
We will provide training and onboarding sessions to ensure that you’ve got everything you need to succeed in your new role.
Interview Process
We’ll reach out to candidates of interest to schedule an interview. We do our best to communicate outcomes to all applicants by email or phone call.
Accommodation
TD Bank is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, status as a protected veteran or any other characteristic protected under applicable federal, state, or local law.
If you are an applicant with a disability and need accommodations to complete the application process, please email TD Bank US Workplace Accommodations Program at USWAPTDO@td.com. Include your full name, best way to reach you and the accommodation needed to assist you with the applicant process.
Company
Company facts come from this company's own listings. We only show what the postings themselves carry.