Information Security Analyst (BISO)

TD International Services Limited; Singapore; Vor Ort; SGD 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Total Rewards Package

Career development

Zusammenfassung

TD International Services Limited seeks a BISO L08 to provide technology and cybersecurity risk support, governance, assessment and oversight across APAC. You will partner with business, technology owners and control functions to identify risks, support controls in design, and assist with regulatory, audit and risk management requirements.

You will lead risk assessments, support CGA, contribute to design assessments, and communicate risks to stakeholders across multiple teams.

Qualifikationen

• Bachelor-level degree in information security or related field.
• 3-5 years of experience in information security, cyber risk, or IT governance.
• Experience supporting risk assessments, control reviews or audit activities.
• Knowledge of technology controls, cybersecurity principles and risk management practices.

Aufgaben

• Lead Technology Asset Risk Assessments (TARA) under supervision.
• Support Control Gap Assessments (CGA) and document deficiencies.
• Contribute to risk assessments using architecture, control and risk information.
• Assist in assessing architecture alignment with security requirements.
• Review architecture blueprints, system/process flows, and evidence.

Kenntnisse

Stakeholder management

Written & verbal communication

Information security knowledge

Regulatory awareness

Ausbildung

University degree in Information Security, Cybersecurity, Computer Science, IT, Risk Management, or related discipline

Tools

Jira

Jobbeschreibung

Work Location: Singapore, Singapore Hours: 40 Line of Business: Technology Solutions Pay Details: We’re committed to providing fair and equitable compensation to all our colleagues. As a candidate, we encourage you to have an open dialogue with a member of our HR Team and ask compensation related questions, including pay details for this role.

Job Description

Role Overview

The BISO L08 role provides Technology and Cybersecurity risk support, governance, assessment and oversight activities across APAC. The role partners with business, technology, application owners and control functions to identify and assess technology and cybersecurity risks, support the incorporation of appropriate controls into application and solution design, and assist with regulatory, audit and risk management requirements.

Key Accountabilities

Technology & Cyber Risk Assessments

• Lead assigned Technology Asset Risk Assessments (TARA) under the guidance and oversight of senior BISO team members, including reviewing information provided by business and technology owners and assessing technology assets against applicable risk criteria.
• Perform and support Control Gap Assessments (CGA), evaluating whether applicable security and technology controls are appropriately designed and documenting identified control deficiencies for remediation or formal risk treatment.
• Contribute to application and technology risk assessments across confidentiality, integrity, availability and applicable regulatory considerations using available architecture, design, control and risk information.
• Application & Design Assessments Support security and technology risk assessments for new applications, material application changes and technology initiatives, including review of architecture and solution designs.
• Contribute to design assessments to determine whether security and technology controls are appropriately incorporated into proposed solutions and identify potential risks or control gaps requiring remediation.
• Review relevant artifacts such as architecture blueprints, system and process flows, TARA and CGA results, findings, security assessments and supporting evidence when contributing to risk assessments and documented outcomes.
• Assist in assessing whether system designs align with applicable security requirements and whether key security capabilities, including authentication, access control and cryptography, have been appropriately considered.

Risk Assessment & Control Gap Support

• Support 1B risk assessment and challenge activities by reviewing risk assessments, control gaps, findings and remediation plans under the guidance of senior BISO team members.
• Review identified control deficiencies, risk ratings, remediation strategies and supporting evidence and contribute to documenting and tracking issues through established governance processes.
• Provide guidance to Technology Asset Owners, Business Asset Owners and project teams within defined parameters on technology and cybersecurity risk requirements, controls and assessment activities.

APAC Governance & Regulatory Support

• Support APAC-specific technology and cybersecurity assessments, including jurisdictional and outsourcing assessments where required, working with Compliance, ORM and other control partners.
• Support regulatory reviews, audit activities, findings management, remediation efforts and evidence requirements across APAC.
• Contribute to risk assessments, observations and recommendations for technology initiatives and applications, supported by relevant assessment artifacts.

Stakeholder Engagement

• Work with application owners, technology teams, business stakeholders, Architecture, GSD, ORM, Compliance, Internal Audit and other SMEs to support the completion of assessments and resolution of identified risks.
• Communicate technology and cybersecurity risks, observations and assessment outcomes to technical and non-technical stakeholders.
• Establish effective relationships across business and technology partners, program managers and project teams to support risk management and governance activities.

Requirements

• University degree in Information Security, Cybersecurity, Computer Science, Information Technology, Risk Management, or a related discipline.
• 3-5 years of experience in Information Security, Cyber Risk, Technology Risk, IT Controls, Governance, Risk & Compliance (GRC), Audit or a related field.
• Experience supporting or conducting technology risk assessments, control reviews, audit activities or governance processes.
• Sound knowledge of technology controls, cybersecurity principles and risk management practices.
• Ability to assess and document technology and cybersecurity risks and control gaps.
• Strong stakeholder management and written and verbal communication skills.
• Ability to manage multiple priorities and deliver quality results within established timelines.

Preferred Qualifications

• Information Security certification such as CISSP, CISM, CRISC, Security+, or equivalent, considered an asset.
• Experience supporting TARA, CGA, technology risk assessments, audit reviews, regulatory examinations or technology governance activities.
• Experience working within a regulated financial services environment.
• Familiarity with NIST, ISO 27001, CIS Controls, COBIT or equivalent industry frameworks.
• Exposure to cloud technologies, application security, identity and access management, or technology outsourcing assessments.
• Experience with governance and risk management tools such as RSA Archer, as well as Agile delivery frameworks and Jira.

Who We Are

TD Securities is one of the world's leading global financial institutions and is the fifth largest bank in North America by branches/stores. Every day, we strive to make every interaction, product, and experience remarkably human and refreshingly simple for over 27 million households and businesses in Canada, the United States and around the world. More than 95,000 TD colleagues bring their skills, talent, and creativity to foster deeper relationships, ensure disciplined execution, and build a simpler, faster banking experience. TD is deeply committed to being a leader in client experience, that is why we believe that all colleagues, no matter where they work, are client facing. Together, we are reimagining what banking can be for our clients, colleagues and communities. Our Total Rewards Package Our Total Rewards package reflects the investment we make in our colleagues to help them, and their families achieve their well-being goals. Total Rewards at TD includes a base salary and several other key plans such as health and well-being benefits, including medical coverage, paid time off, career development, and reward and recognition programs.

Additional Information

We’re delighted that you’re considering building a career with TD. Through regular development conversations, training programs, and a competitive benefits plan, we’re committed to providing the support our colleagues need to thrive both at work and at home.

Colleague Development

If you’re interested in a specific career path or are looking to build certain skills, we want to help you succeed. You’ll have regular career, development, and performance conversations with your manager, as well as access to an online learning platform and a variety of mentoring programs to help you unlock future opportunities. If you’re passionate about helping clients and building deep, lasting relationships, TD offers diverse career paths where you can grow your expertise and make a meaningful impact. We're committed to your success and foster a respectful workplace where diverse perspectives are valued, everyone has fair opportunities to grow, and you can unlock your full potential to achieve your career goals. Here at TD, we hire and develop the best.

Training & Onboarding

We will provide training and onboarding sessions to ensure that you’ve got everything you need to succeed in your new role.

Interview Process

We’ll reach out to candidates of interest to schedule an interview. We do our best to communicate outcomes to all applicants by email or phone call.

Accommodation

If you require an accommodation for the recruitment / interview process (including alternate formats of materials, or accessible meeting rooms or other accommodation), please let us know and we will work with you to meet your needs.

US Labor & Employment Posters | California Privacy | Accessibility | FAQ

Our Values

At TD we’re guided by our purpose to enrich the lives of our customers, communities and colleagues, and share a set of values that shape our culture and guide our behavior. In exchange for how our colleagues show up to help TD succeed, we are committed to delivering a colleague experience grounded in Impact, Growth and a Culture of Care. No matter where you work across TD, we empower you to make an impact at work and in your community, explore and grow your career and be part of our caring and inclusive culture.

Our Commitment to Diversity, Equity, and Inclusion

At TD, we’re committed to fostering an environment where all colleagues are encouraged to bring their authentic selves to work, experience equitable opportunities, and feel respected and supported. We’re dedicated to building an inclusive workforce that reflects the diversity of the customers and the communities in which we live and serve.

Helping to Make an Impact in Communities – TD Ready Commitment

TD has a long-standing commitment to help drive progress towards a more inclusive and sustainable future. That’s why we launched the TD Ready Commitment in 2018, now a multi-year North American initiative. Under the TD Ready Commitment, we are targeting a total of C$1 billion by 2030 in community giving across four key, interconnected drivers of change: Financial Security, Vibrant Planet, Connected Communities, and Better Health. It’s our goal to help support change, nurture progress, and contribute to making the world a better, more inclusive place for our customers, colleagues, and communities.

Learn more: Canada | US | Europe & Asia Pacific