Manager, Group Risk

TD; Toronto; On-site; CAD 91,000 - 137,000; Full time

Job summary

Join a forward-thinking organization where your expertise in risk management and cybersecurity will play a crucial role in shaping secure technology products for customers. In this dynamic position, you will manage technology assets, conduct risk assessments, and collaborate with various stakeholders to enhance risk governance. You will have the opportunity to lead a talented team, ensuring that our technology applications and vendors operate within our risk appetite. This role offers a chance to make a significant impact in a stable and secure environment, contributing to the overall success of the organization while fostering your professional growth.

Qualifications

• 7+ years of relevant experience in risk management and cybersecurity.
• Current technology certifications preferred, including CISSP, CISA, etc.

Responsibilities

• Manage technology assets, providing oversight and advisory services.
• Conduct regular risk assessments and report findings to senior management.
• Lead and develop risk frameworks and policies in line with TD’s Risk Program.

Skills

Risk Management

Cybersecurity

Analytical Skills

Leadership

Communication

Education

Undergraduate degree or technical certificate

Tools

CISSP

CCSP

CISA

CISM

Security+

PCI

NIST

COBIT

MITRE

Job description

Time left to apply End Date: March 10, 2025 (30+ days left to apply)

Job requisition id R_1381084

Work Location: Toronto, Ontario, Canada

Hours: 37.5

Line of Business: Risk Management

Pay Details: $91,200 - $136,800 CAD

TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs.

As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

Job Description:

Welcome to Credit Risk Marketplace! Where your tech-savvy risk knowledge will help shape a cyber-safe and stable environment for our customers.

Our Product: Stable and secure technology products that deliver value for our Credit (Mortgage, Line of Credit, Credit Card, etc) customers at TD.

How we deliver it: Through an incredibly talented team of folks, with deep expertise in cybersecurity, IT risk, and agile; who have a keen understanding of why strong, risk-secured products are better products for our bank and the market.

Responsibilities:

• Manage a portfolio of technology assets, providing oversight and control, alongside IT security related advisory services.
• Take corrective action against identified technology or security gaps.
• Assess technology operational and IT/cyber risks of application, API, and technology changes.
• Keen eye for uncovering unidentified and/or edge case risks, ability to critically analyze and support through both technology delivery and lifecycle pipelines.
• Completion of regular risk assessments, including reporting discoveries to Senior Manager lead and partner/exec stakeholders.
• Gap/Finding identification, remediation, and closure.
• Contribute your experience to further enhance our technology governance, bringing it to new heights.
• Work with a team of Risk professionals, contributing to the larger shared portfolio.
• Provide guidance, leadership, coaching and development to ensure operational results and professional/personal development objectives are achieved.
• Follow industry best-practices and frameworks, alongside enterprise policies and standards, to ensure technology applications, APIs, and vendors operate within our risk appetite.
• Incorporate consideration of relevant laws, rules, and regulations.
• Act as key liaison with partners and external groups and provide Risk subject matter expertise.
• Partner effectively with key stakeholder groups such as Compliance, Legal, Audit, AML.
• Follow, Lead and develop Risk enterprise-wide frameworks, policies, standards, procedures in coordination with management in line with TD’s Risk Program.
• Recommend or implement changes to procedures, as required.
• Coach technology teams to ensure functional/ operational problems are handled appropriately, and participate in the negotiation and resolution of complex and/or escalated issues, where necessary.
• Work with peers, 1st and 2nd line, executive team, senior business management/ partners to develop proactive strategies, tactics, policies and programs to effectively manage regulatory/ compliance issues.
• Participate in / Manage global regulatory examinations and external / internal audits with respect to request for information.
• Ensure adherence to enterprise frameworks and methodologies related to overall business management activities.
• Keep abreast of emerging issues, trends, and evolving regulatory requirements and assess potential impacts.
• Maintain a culture of risk management and control, supported by effective processes in alignment with risk appetite.

Requirements:

• Undergraduate degree or technical certificate and/or 7+ years relevant experience.
• Candidates holding current technology certification (CISSP, CCSP, CISA, CISM, Security+, etc) highly preferred.
• Familiarity with best-practice frameworks (PCI, NIST, COBIT, MITRE, etc) highly beneficial.
• Ability to lead and manage a sizeable risk portfolio of diverse technology assets in an area of moderate to high risk, with varying complexity and scope.
• Experience presenting risk analysis and making recommendations to senior management and executives.
• Coordinates and prioritizes multiple initiatives and manages resource allocation.
• Establishes effective relationships with different Stakeholders, Business Sponsors, Executives and LOB.
• Previous system administration, developer, or network/cloud experience a bonus.