Information Security Specialist (US) Risk Controls & Governance

TD; Mount Laurel Township (NJ); Hybrid; USD 98,000 - 159,000; Full time

Job summary

TD in Mount Laurel, New Jersey is seeking a senior cybersecurity professional to join the Platforms & Technology Global Risk and Compliance COE, focusing on IAM risk assessments, control testing, and technology controls across enterprise programs.

You will collaborate with partners to improve governance, reporting, and assurance of IAM processes; the role requires 7+ years in information security, familiarity with IAM concepts, and strong communication skills.

Qualifications

• 7+ years of relevant information security experience.
• Experience with IAM controls testing and governance.
• Familiarity with IAM platforms and tools.
• Strong communication and documentation skills.

Responsibilities

• Update IAM risk and control assessments tracker and report status (weekly/monthly/quarterly).
• Conduct IAM risk assessments and evaluate control effectiveness (design and operating).
• Guide partners on IAM policies, standards, and controls across programs.
• Lead or contribute to risk and control design assessments for assigned assets.
• Contribute to global security governance focusing on identity governance and risk reporting.
• Monitor, detect, prevent and respond to IAM threats against the business.
• Develop ongoing IAM risk reporting with metrics to measure control effectiveness.
• Adhere to enterprise IAM policies and regulatory guidelines.

Skills

Identity & Access Management

Information security risk management

IAM controls testing

PAM

MFA/SSO/federation

Active Directory / Entra ID

Education

Bachelor's degree preferred

Information security certification / accreditation an asset

Tools

Microsoft Power Apps

Job description

Work Location:

Mount Laurel, New Jersey, United States of America

Hours:

40

Pay Details:

$98,160 - $159,270 USD

TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate’s skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs.

As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

Line of Business:

Technology Solutions

Job Description:

You will be a core member of a high performing team of technology and risk professionals who utilize their subject matter expertise in Identity and Access Management (IAM), technology controls, and information and /cyber security risk management to provide effective guidance on a broad range of cyber security IAM-related policies, standards and controls in compliance with the Enterprise Risk and Control Framework. As part of the Platforms and Technology (P&T) Global Risk and Compliance (GR&C) Asset Assessment Centre of Excellence (COE) team, you will play a key role in ensuring required IAM risk and control assessments are completed efficiently and with quality/care

Here’s some of what you may be asked to perform:

• Update the risk and control assessments tracker on a regular basis, and prepare weekly, monthly, and quarterly risk and operational reporting focused on IAM control testing status and findings.
• Conduct required IAM risk and control assessments and evaluate control procedure appropriateness, and .design and operating effectiveness, including identity lifecycle, access management, privileged access, authentication and related controls.
• Guide partners on a broad range of IAM and technology controls, as well as and information and cyber security programs, policies, and standards.
• Lead or contribute to the completion of risk and control design assessments for any assigned assets within the enterprise.
• Contribute to the definition, development, and oversight of a global security management strategy and framework, with a focus on identity and access governance.
• Ensure technology, processes, and governance are in place to monitor, detect, prevent, and react to both current and emerging IAM and technology and security threats against TDBG’s business.
• Contribute to the development of on-going technology and IAM risk reporting, monitoring key trends and providing assurance that metrics to regularly measure control effectiveness for own area are met.
• Adhere to internal IAM policies and procedures, technology control standards, and applicable regulatory guidelines.
• Contribute collaboratively to the review of internal processes and activities and assist in identifying potential opportunities for improvement in IAM practices and governance.
• Adhere to, advise, oversee, monitor and enforce enterprise frameworks and methodologies that relate to technology controls, IAM and information security activities.
• Influence behavior to reduce risk and foster a strong technology risk management culture throughout the enterprise.

Depth & Scope:

• Participates on complex, comprehensive or large projects and initiatives
• Acts as a lead expert resource in technology controls / information security for project teams, the business / organization and/or outside vendors
• Has advanced knowledge of organization, technology controls / security/ risk issues

Education & Experience:

• Bachelor’s degree preferred
• Information security certification / accreditation an asset
• 7+ years of relevant experience
• Expert knowledge of IT security and risk disciplines and practices

Preferred Qualifications :

• University degree.
• 2+ years of relevant experience in the area of IT risk, and technology, and/or information security, IAM control assessment/testing, and/or data analysis in a large organization.
• Hands-on experience assessing or testing Identity and Access Management controls.
• Working knowledge of IAM concepts, processes and common platforms (e.g. identity lifecycle management, PAM, MFA/SSO/federation, Active Directory / Entra ID, Ping Fed, CyberArk, and other equivalent IGA/PAM tools).
• Proficient with Microsoft Power Apps.
• Information Security Certification/Accreditation (e.g., CISA, CRISC, CISSP, CISM, or equivalent) (an asset).
• Skills to identify, assess, and monitor technology and IAM risks including information security, cyber security, access governance, resilience, operations/change management quality, data quality/security, and IT compliance.
• Advanced knowledge of one or more technology controls or security domains, with relevance to IAM disciplines and practices.
• Strong critical thinking - ability to decompose complex issues into manageable pieces.
• Ability to articulate ideas, share experiences and skills, and explain IAM findings clearly to both technical and non-technical audiences.
• Sound to advanced knowledge of business, technology controls, security, IAM, and risk issues.
• Firm commitment to staying informed/abreast of emerging cyber, and information security issues, IAM issues and industry trends.
• Strength in prioritizing and managing your own workload to deliver quality results and meet timelines with limited guidance of management.
• Knowledge of industry standards and best practices in the areas of technology, information and , information and, cyber security, access governance, and risk management and governance(e.g. NIST, ISO 27001, COBIT, SOX/ITGC frameworks).
• High flexibility and are comfortability able working in a fluid, changing environment.
• Strong communication, written and presentation skills (including production of clear, audit-ready documentation and evidence).
• Ability to multi-task and manage multiple team and client demands concurrently.
• Dedicated team player; comfortable with a dynamic work environment.
• Diligent and resourceful in research, evidence collection, and information gathering.
• Proficient with technology tools including Microsoft Power Apps, .

#TDCyberSecurity #Hybrid Onsite : Mount Laurel, NJ or Charlotte, NC

Physical Requirements:

• Domestic Travel – Occasional
• International Travel – Never
• Performing sedentary work – Continuous
• Performing multiple tasks – Continuous
• Operating standard office equipment - Continuous
• Responding quickly to sounds – Occasional
• Sitting – Continuous
• Standing – Occasional
• Walking – Occasional
• Moving safely in confined spaces – Occasional
• Lifting/Carrying (under 25 lbs.) – Occasional
• Lifting/Carrying (over 25 lbs.) – Never
• Squatting – Occasional
• Bending – Occasional
• Kneeling – Never
• Crawling – Never
• Climbing – Never
• Reaching overhead – Never
• Reaching forward – Occasional
• Pushing – Never
• Pulling – Never
• Twisting – Never
• Concentrating for long periods of time – Continuous
• Applying common sense to deal with problems involving standardized situations – Continuous
• Reading, writing and comprehending instructions – Continuous
• Adding, subtracting, multiplying and dividing – Continuous

The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all responsibilities, duties and skills required. The listed or specified responsibilities & duties are considered essential functions for ADA purposes.

Who We Are:

TD is one of the world’s leading global financial institutions and is the fifth largest bank in North America by branches/stores. Every day, we strive to make every interaction, product, and experience remarkably human and refreshingly simple for over 27 million households and businesses in Canada, the United States and around the world. More than 95,000 TD colleagues bring their skills, talent, and creativity to foster deeper relationships, ensure disciplined execution, and build a simpler, faster banking experience. TD is deeply committed to being a leader in client experience, that is why we believe that all colleagues, no matter where they work, are client facing. Together, we are reimagining what banking can be for our clients, colleagues and communities.

Our Total Rewards Package

Our Total Rewards package reflects the investments we make in our colleagues to help them and their families achieve their financial, physical and mental well-being goals. Total Rewards at TD includes base salary and variable compensation/incentive awards (e.g., eligibility for cash and/or equity incentive awards, generally through participation in an incentive plan) and several other key plans such as health and well-being benefits, savings and retirement programs, paid time off (including Vacation PTO, Flex PTO, and Holiday PTO), banking benefits and discounts, career development, and reward and recognition. Learn more

Additional Information:

We’re delighted that you’re considering building a career with TD. Through regular development conversations, training programs, and a competitive benefits plan, we’re committed to providing the support our colleagues need to thrive both at work and at home.

Colleague Development

If you’re interested in a specific career path or are looking to build certain skills, we want to help you succeed. You’ll have regular career, development, and performance conversations with your manager, as well as access to an online learning platform and a variety of mentoring programs to help you unlock future opportunities.

If you’re passionate about helping clients and building deep, lasting relationships, TD offers diverse career paths where you can grow your expertise and make a meaningful impact.

We’re committed to your success and foster a respectful workplace where diverse perspectives are valued, everyone has fair opportunities to grow, and you can unlock your full potential to achieve your career goals. Here at TD, we hire and develop the best.

Training & Onboarding

We will provide training and onboarding sessions to ensure that you’ve got everything you need to succeed in your new role.

Interview Process

We’ll reach out to candidates of interest to schedule an interview. We do our best to communicate outcomes to all applicants by email or phone call.

Accommodation

TD Bank is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, status as a protected veteran or any other characteristic protected under applicable federal, state, or local law.

If you are an applicant with a disability and need accommodations to complete the application process, please email TD Bank US Workplace Accommodations Program at [e-mail].