Td Bank Senior Manager Risk 1B 

Canada, Ontario, Toronto 

423144375

• Ensure team provide technical expertise and consultation to partners and/or stakeholders on a broad range of Technology Controls / Information Security programs / policies / standards and incidents for own specialized discipline / practice area

• Oversee and assign expert resources on project consulting on assessment of risk, definition of required controls, appropriateness of implemented control procedures, vulnerability assessments and any other relevant areas

• Conduct comprehensive risk and control design assessments for an application portfolio, articulate and document impact of control gaps to the business and the overall Bank, risk mitigation and remediation plans, remediation strategy document or provide info security solutions to address risks as applicable

• Ensure technology, processes, and governance are in place to monitor, detect, prevent, and react to current and emerging security threats against TDBG’s business

• Contribute to the definition, development, and oversight of a global network and endpoint security threat management strategy and framework

• Provide guidance to the team in the development of on-going Technology Risk reporting, monitoring key trends and defining metrics to regularly measure control effectiveness for own area

• Provide guidance to team and proactively work with Technology leaders / stakeholders and service/platform owners to ensure all technology controls, security components are integrated into the bank’s overall Enterprise Architecture and any control gaps are addressed.

• Consult on Regulatory compliance requirements, reporting and questions

• Provide support and consulting in preparation for Audits and in composing management responses and appropriate remediation activities

• Develop and oversee deployment of software security program across TD Bank for in-house developed and commercial off-the-shelf software focusing on standard process and tools

• Manage executive communications and reporting of Application Security and Customer Protection programs, risks, incidents and threats for the enterprise

• Develop and implement a technology controls /security awareness and software security training curriculum for technology partners

• Participate in computer security incident responses relevant to business (or enterprise wide) and represent respective function and Enterprise position to the business, and business needs to incident response team

Requirements:

• 10 plus years of relevant experience

• Deep expertise and knowledge of Bank, technology standards and leading large and varied teams of professionals

• Expert knowledge of broad scope of technology controls / information security, technology, tools, processes and procedures, as well as broader organization issues

• Oversees / manages a team or group(s) of moderate to large or in size, scope, risk and complexity

• Future-focused, providing thought leadership

• Excellent communication, negotiation and organizational skills specifically including the ability to present options in business terms to both IT and business staff including executives

• Generally reports to an executive role

• University degree

• Information security certification / accreditation an asset