Senior Global Security & Third-Party Risk Lead

TD Bank Group; Toronto; On-site; CAD 97,000 - 137,000; Full time

Job summary

TD Bank Group in Toronto is seeking a Manager, Global Security to lead end-to-end third-party cybersecurity risk assessments. You will evaluate controls, review evidence such as SOC reports, and document defensible conclusions within TD's 3PCRM framework.

The role requires deep knowledge of IAM, vulnerability management, data protection, and cloud security. You will coordinate with vendors, risk stakeholders, and internal teams to close findings and improve overall security posture.

Qualifications

• Extensive experience in cybersecurity and risk management.
• Ability to assess third-party controls and evidence.
• Strong written and verbal communication.
• Experience with security frameworks (SOC, ISO 27001, NIST).
• 10+ years in cybersecurity/risk roles.

Responsibilities

• Execute end-to-end third-party cybersecurity assessments following 3PCRM.
• Review third-party evidence (SOC reports, policies, certifications).
• Challenge incomplete responses and obtain additional evidence.
• Document control deficiencies and risk rationale with clarity.
• Maintain audit-ready assessment documentation and close findings.

Skills

Cybersecurity

Third-party risk

IT risk management

Risk assessment

Analytical skills

Education

Post-secondary education

CISSP certification preferred

Tools

SOC reports

ISO 27001

NIST

Job description

TD Bank Group in Toronto is seeking a Manager, Global Security to lead end-to-end third-party cybersecurity risk assessments. You will evaluate controls, review evidence such as SOC reports, and document defensible conclusions within TD's 3PCRM framework.

The role requires deep knowledge of IAM, vulnerability management, data protection, and cloud security. You will coordinate with vendors, risk stakeholders, and internal teams to close findings and improve overall security posture.