Senior Manager, Governance & Control

Cari; Toronto; Hybrid; CAD 116,000 - 163,000; Full time

Job summary

TD is seeking a senior information security leader in Toronto to collaborate with Business, Risk, Privacy, and Technology to assess cybersecurity risks and provide practical, risk-based security guidance. The role emphasizes security architecture, cloud platforms, Generative AI, and compliance with standards like ISO, NIST, and PCI DSS.

You will drive risk remediation, governance reporting, and secure-by-design advice across the business unit.

Qualifications

• Bachelor's or Master's degree in IT/CS/Cyber Security or equivalent.
• 10+ years in design, architecture, development and implementation of secure solutions.
• 5+ years in a leadership security role.
• Deep knowledge of modern application development, Generative AI, and emerging tech.
• Experience in consulting/advisory with stakeholders.

Responsibilities

• Serve as the primary information security liaison between the BU and IT.
• Translate security policies into practical, risk-based controls.
• Unblock and manage security, risk, and compliance issues.
• Monitor and enforce security policy compliance; track exceptions.
• Act as BU contact to understand security risks for tech needs.
• Assess security of software/AI tools; provide approvals or whitelisting.
• Support SAR process; collaborate with Security teams.
• Develop and maintain BU Risk Register.
• Coordinate with stakeholders to document security requirements.

Skills

Security architecture

Leadership

Consulting / advisory

Risk management

Cloud security (Azure, AWS, GCP)

Education

Bachelor's or Master's degree in Information Technology, Computer Science, Cyber Security or related field

Tools

Azure

AWS

GCP

SaaS security

Generative AI tools

Job description

Work Location: Toronto, Ontario, Canada

Hours: 37.5

Line of Business: Governance & Control

Pay Details: $115,600 - $163,200 CAD

TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs.

As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

Job Description:

The BISO will collaborate with Business, Risk, Privacy, and Technology teams to assess and analyze cybersecurity risks. The individual will provide security recommendations based on identified threats and risks, while considering compliance and regulatory requirements relevant to the Business Unit. Additionally, the individual will document and track identified risks and recommendations and obtain necessary risk and security approvals where required.

The ideal candidate will demonstrate strong knowledge of modern application lifecycle practices, security architecture, cloud platforms, Generative AI tools, frontier models, API security, and application security standards such as OWASP, along with familiarity with frameworks such as ITIL, ISO, COBIT.

What you will do:

• Serve as the primary information security liaison between the Business Unit and the IT.
• Translate Firm security policies, procedures, and standards into practical, risk-based controls for the Business Unit technology ecosystem
• Proactively unblock and manage security, risk, and compliance issues by bringing together Advisory, Audit, ITS, Risk, Security stakeholders, driving decisions, tracking actions, and ensuring issues are worked through to a clear and timely end state
• Monitor compliance with security policies, standards, and control requirements; identify non-compliance, initiate remediation actions, and track exceptions through formal risk acceptance processes with appropriate compensating controls
• Act as the BU key point of contact to understand security risks related to evolving business requirements for technology and solutions, and apply security-by-design principles to provide proactive, business-focused, guidance aligned with Firm's security policies and standards
• In coordination with 1B team, assess and review business-requested software, tools, and AI capabilities (including SaaS and Generative AI solutions) for security, privacy, and compliance risks; lead intake, risk evaluation, and provide delegated approval or whitelisting where necessary
• Collaborate with Project, Technology, Business, and Risk teams to gather requirements and support the Security Assessment Review (SAR) process, led by Platform Security
• Develop and maintain a business unit Risk Register to track security risks
• Coordinate with stakeholders to ensure security requirements are documented and tracked throughout the project lifecycle

Governance

• Maintain a strong understanding of Risk and Security policies
• Maintain and validate a comprehensive inventory of business applications, tools, and technology assets (on-premises and cloud), ensuring alignment with Firm security standards
• Coordinate implementation and onboarding of new security programs and capabilities
• Contribute to annual business planning processes and recommend initiatives to enhance security posture and operational efficiency
• Represent the business unit and provide key metrics in monthly security governance forums

Monitoring

• Monitor adherence to 1B security policies and standards
• Review compliance reports generated by security tools and address identified issues
• Maintain an accurate and up-to-date inventory of business applications (on-premises and cloud environments including Azure, AWS, and GCP)
• Monitor control effectiveness across all technology assets within the business unit, understand how to 'test' controls

What you bring to this role:

• Bachelor's or Master's degree in Information Technology, Computer Science, Cyber Security or a related field, or equivalent experience
• 10+ years of experience in application, technology, or solution design, architecture, development, and implementation
• 10+ years of experience in secure design/architecture and project risk assessments across modern cloud and on-premises environments, including SaaS solutions
• 5+ years of experience as a security practitioner in a leadership role
• Deep understanding of modern application development ecosystems, open systems, Generative AI, and emerging technologies
• Strong knowledge of information security standards and frameworks (e.g., CSA, ITIL, CCM, ISO 27001/27017/27018/42001, PCI DSS, NIST CSF, NIST 800-53) and data protection principles
• Experience working with modern AI tools and capabilities
• Proven experience in a consulting or advisory role, collaborating with Technology, Project, and Business stakeholders
• Holding any of the following certifications would be considered an asset but not required: CISSP, CISA, CRISC, CISM, CGEIT

Who We Are:

TD is one of the world's leading global financial institutions and is the fifth largest bank in North America by branches/stores. Every day, we strive to make every interaction, product, and experience remarkably human and refreshingly simple for over 27 million households and businesses in Canada, the United States and around the world. More than 95,000 TD colleagues bring their skills, talent, and creativity to foster deeper relationships, ensure disciplined execution, and build a simpler, faster banking experience. TD is deeply committed to being a leader in client experience, that is why we believe that all colleagues, no matter where they work, are client facing. Together, we are reimagining what banking can be for our clients, colleagues and communities.

Our Total Rewards Package

Our Total Rewards package reflects the investments we make in our colleagues to help them and their families achieve their financial, physical, and mental well-being goals. Total Rewards at TD includes a base salary, variable compensation, and several other key plans such as health and well-being benefits, savings and retirement programs, paid time off, banking benefits and discounts, career development, and reward and recognition programs. Learn more

Additional Information:

We're delighted that you're considering building a career with TD. Through regular development conversations, training programs, and a competitive benefits plan, we're committed to providing the support our colleagues need to thrive both at work and at home.

Please be advised that this job opportunity is subject to provincial regulation for employment purposes. It is imperative to acknowledge that each province or territory within the jurisdiction of Canada may have its own set of regulations, requirements.

Colleague Development

If you're interested in a specific career path or are looking to build certain skills, we want to help you succeed. You'll have regular career, development, and performance conversations with your manager, as well as access to an online learning platform and a variety of mentoring programs to help you unlock future opportunities.

If you're passionate about helping clients and building deep, lasting relationships, TD offers diverse career paths where you can grow your expertise and make a meaningful impact.

We're committed to your success and foster a respectful workplace where diverse perspectives are valued, everyone has fair opportunities to grow, and you can unlock your full potential to achieve your career goals. Here at TD, we hire and develop the best.

Training & Onboarding

We will provide training and onboarding sessions to ensure that you've got everything you need to succeed in your new role.

Accommodation

Your accessibility is important to us. Please let us know if you'd like accommodations (including accessible meeting rooms, captioning for virtual interviews, etc.) to help us remove barriers so that you can participate throughout the interview process.

Language Requirement (Quebec only):

Sans Objet