GRC Security Specialist - Risk, Automation & Compliance

The Toronto-Dominion Bank (Canada); Toronto; On-site; CAD 97,000 - 137,000; Full time

Benefits offered by this job

Accommodation

Total Rewards Package

Job summary

The Toronto-Dominion Bank (Canada) is seeking an Information Security Specialist, Risk Management Transformation within the Governance, Risk and Controls (GRC) team in Toronto. This role provides specialized guidance to define, develop, and improve technology and cybersecurity risk management processes that support Global Security & Defense and Global Technology Services.

You will apply risk assessment methods, automate testing, build evidence management, and help elevate risk-informed

Qualifications

• Advanced knowledge of technology controls, information security, cybersecurity, or technology risk domains.
• Experience managing projects of moderate to high complexity at enterprise scale.
• Ability to operate in fast-paced, ambiguous environments with strong judgment.
• Strong relationship-management and consulting skills across a large, matrixed organization.
• Analytical, detail-oriented, and able to translate needs into actionable requirements.

Responsibilities

• Define and improve GRC processes, tools, and capabilities.
• Lead design for risk and control assessments and evidence collection.
• Design automated testing and assessment capabilities with data sourcing and integration.
• Consult with partners on tooling, GRC capabilities and automation.
• Identify opportunities to use AI and predictive analytics to enhance outcomes.
• Gather and translate security needs into clear requirements and user stories.
• Build relationships across business, technology, risk, compliance, audit, product and delivery partners.

Skills

Information security

Cybersecurity

Technology risk

GRC

Automation

Data & evidence management

Risk assessment

Education

University degree or equivalent

CISSP/CISM/CISA/CRISC asset

Job description

The Toronto-Dominion Bank (Canada) is seeking an Information Security Specialist, Risk Management Transformation within the Governance, Risk and Controls (GRC) team in Toronto. This role provides specialized guidance to define, develop, and improve technology and cybersecurity risk management processes that support Global Security & Defense and Global Technology Services.

You will apply risk assessment methods, automate testing, build evidence management, and help elevate risk-informed