Manager, Information Security

Work Location:
Toronto, Ontario, Canada

Hours:
37.5

Line of Business:
Technology Solutions

Pay Details:
$91,200 - $136,800 CAD

TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs.

Job Description:

Team Overview:

The RMP/Technology Control Office (TCO) is part of Enterprise Protect 1B line of defence. The TCO team is responsible for protecting TS organizations by ensuring technology risks are identified, communicated, reported, managed, and remediated. Within TD Risk Management Framework, the TCO engages with the TS teams and other risk partners to ensure TS teams operate within TD risk appetite, risk remediation efforts align with enterprise directions and risk tolerance, support TS management in determining risk remediation strategies, and provides an independent view on TS segments risk profiles and their remediation efforts to advance the risk management culture within the P&T organization.

Job Responsibilities:

Overall Risk Management:

• Maintain a strong understanding of current business and technology risks, emerging risks, and regulatory landscape. Adjust the TCO approaches and scope of work to remain aligned with the always evolving risk landscape.
• Operate as a centralized risk mitigation and remediation intake manager to build a consolidated view of all mitigation and remediation programs for the platforms in scope, and provide TCO leader, other RMP partners, and platform leadership teams with the insight necessary to prioritize numerous competing risk mitigation and remediation initiatives.
• Work with the TCO lead, various risk partners, and TS segment leadership to ensure effective mobilization of teams involved in risk mitigation or remediation programs and activities.
• Oversee & monitor the execution of risk remediation/mitigation and enterprise initiatives to meet risk reduction targets, and as needed escalate or help resolve challenges in remediation programs.
• Coordinate with the relevant TCO or BISO subject matter experts to oversee and facilitate the resolution of multiple technology risk matters such as overdue access removals, admin access, infrastructure security or application security issues, etc.
• Provide P&T/TS teams senior leadership transparency on portfolio of risk remediation programs and initiatives, and audit finding resolution programs.
• Facilitate the development of remediation strategies, engagement of risk partners, SMEs and development of sound risk remediation programs and approaches.

Risk & Control Examinations:

• Oversight and coordination of multiple control examinations (project and IT audits, SOX audits - in coordination with the SOX specialists, regulatory examinations, compliance assessments, etc.) to ensure audits and reviews are planned adequately and completed on time.
• Holistic understanding of the portfolio of findings, including audit, regulatory, compliance, gap assessment, self-identified findings, and understanding of the progress towards remediations to ensure challenges and remediation risks are understood, communicated, and addressed by the finding owners.
• Work with finding owners to help them develop adequate responses and remediation plans, ensure identified control gaps will be properly mitigated and/or adequate remediation plans will be developed.
• Work with finding owners to ensure findings are closed and pass the various finding resolution review stages, such as PTACC and audit finding closure process.
• Ensure adequate representation in various committees such as PTACC or Quarterly Audit Updates, TS/Platforms risk management meetings.

Job Requirements:

• Undergraduate degree - 10 to 15 years relevant experience in audit, SOX programs, and risk management, preferably with technology, CISA, CRISC.
• Solid understanding of the concepts and practices of IT risk management, IT process and related controls.
• Familiarity with the Bank's Technology Risk Management framework and IT Audit process as well as industry best practices would be a great asset.
• Ability to understand and detect business and technology issues and their impacts.
• Ability to effectively interact with individuals across the organization and at various levels (Technical, Business, Management & Executive).
• Good judgment- ability to determine which issues to escalate vs. to resolve independently and provide suggestions for possible resolution.
• Ability to communicate effectively and build good working relationships with diverse groups to identify issues, reach consensus and implement workable solutions.
• Experience and ability to work with a team of seasoned audit professionals, also very seasoned in SOX audit will be critical to succeed in the role.
• Previous multi-year audit and SOX audit experience would be the most significant asset, and previous risk management experience preferable.
• Skillful communication (written and verbal), negotiation and partnership skills to balance input but remain objective to reach the right outcome - ability to stay resilient under pressure.
• Detailed oriented, strong analytical, organization and problem-solving skills.
• Must be a self-motivated, energetic, and results-oriented and be committed to adding value to the team.
• Excellent time management skills and a proven ability to meet deadlines and manage multiple tasks.
• Ability to work independently and in teams with minimal supervision.
• Experience with MS Office Suite of software (Word, PowerPoint, Visio, Outlook and SharePoint) with expert working and operational knowledge of MS Excel.

Who We Are:

TD is one of the world's leading global financial institutions and is the fifth largest bank in North America by branches/stores. Every day, we deliver legendary customer experiences to over 27 million households and businesses in Canada, the United States and around the world. More than 95,000 TD colleagues bring their skills, talent, and creativity to the Bank, those we serve, and the economies we support. We are guided by our vision to Be the Better Bank and our purpose to enrich the lives of our customers, communities and colleagues.

Our Total Rewards Package:
Our Total Rewards package reflects the investments we make in our colleagues to help them and their families achieve their financial, physical, and mental well-being goals. Total Rewards at TD includes a base salary, variable compensation, and several other key plans such as health and well-being benefits, savings and retirement programs, paid time off, banking benefits and discounts, career development, and reward and recognition programs.

Additional Information:
We're delighted that you're considering building a career with TD. Through regular development conversations, training programs, and a competitive benefits plan, we're committed to providing the support our colleagues need to thrive both at work and at home.

Colleague Development:
If you're interested in a specific career path or are looking to build certain skills, we want to help you succeed. You'll have regular career, development, and performance conversations with your manager, as well as access to an online learning platform and a variety of mentoring programs to help you unlock future opportunities.

Training & Onboarding:
We will provide training and onboarding sessions to ensure that you've got everything you need to succeed in your new role.

Interview Process:
We'll reach out to candidates of interest to schedule an interview. We do our best to communicate outcomes to all applicants by email or phone call.

Accommodation:
Your accessibility is important to us. Please let us know if you'd like accommodations (including accessible meeting rooms, captioning for virtual interviews, etc.) to help us remove barriers so that you can participate throughout the interview process.

We look forward to hearing from you!

Language Requirement (Quebec only):
Maîtrise d'une langue autre que le français pour offrir du soutien ou traiter avec des employés qui ont besoin de services et de soutien dans une langue autre que le français.