Group Risk Specialist – Information Security Risk Management (4925)

TD•Mississauga, ON

1d•CA$115,600 - CA$163,200•Onsite

About The Position

The Second Line of Defense (2LoD) independent Operational Risk Management (ORM) Technology and Cyber Security Risk Management (TCRM) team works in partnership with the business units and corporate groups of TD Bank Group to further the understanding and management of operational risk across the enterprise. 2LoD TCRM provides independent oversight and challenge to operational risk management activities executed by the Technology organization and business groups across the enterprise. They partner with the first line of defense (CIO & CISO organizations) in identifying, reporting, and mitigating Technology and Cybersecurity risk issues and provide subject matter expertise in Cybersecurity risk management practices. The group executes 2A requirements in support of the 3 lines of defense framework. The Technology and Cybersecurity Risk Management Risk Specialist will support the advancement of Technology and Cybersecurity Risk Management capabilities through data analytics, reporting, automation, process optimization, and technology enablement. The role will partner with cybersecurity subject matter experts and risk professionals across the first and second lines of defense to develop scalable solutions that enhance risk visibility, operational efficiency, and decision-making. Reporting to the Senior Manager, Technology and Cybersecurity Risk Management, this role will have the following accountabilities: Lead the development of cybersecurity risk data, analytics, and reporting capabilities, including risk aggregation, dashboarding, and insight generation to support executive reporting and risk oversight. Design, implement, and maintain 2LoD tooling, workflows, and automation solutions using platforms such as Power BI, Power Apps, AI agents, Copilot technologies, and related tools to improve operational efficiency and scalability. Oversee risk data ingestion, data management, and analytical processes across cybersecurity programs and business segments to enhance visibility, trend analysis, and reporting effectiveness. Drive the evolution of 2LoD operating models, methodologies, and continuous improvement initiatives to strengthen data-driven risk management capabilities and execution effectiveness. Partner with cybersecurity subject matter experts and stakeholders to deliver analytics, tooling, automation, and operational capabilities that support risk assessments, maturity evaluations, strategic planning, and risk management activities. Develop and maintain execution tracking, performance reporting, work management processes, and portfolio insights to support planning, prioritization, and delivery of key cybersecurity risk initiatives. Identify opportunities to leverage artificial intelligence, intelligent agents, automation, and emerging technologies to improve productivity, reduce manual effort, and enhance the effectiveness of risk management processes. Effectively communicate analytical findings, trends, and insights to executive and senior management in a clear and actionable manner. Maintain awareness of emerging cybersecurity risks, technology trends, regulatory developments, and industry best practices to support continuous enhancement of risk management capabilities. Foster strong working relationships across business, technology, cybersecurity, and risk teams to enable collaboration and successful delivery of strategic objectives.

Requirements

Experience in Cybersecurity, Technology Solutions, Data Analytics, Risk Management, or Internal Audit.
Strong experience with data analytics, reporting, visualization, and tooling, including Power BI, Power Apps, Microsoft Copilot, JIRA, Confluence, SharePoint, and related platforms.
Experience developing dashboards, metrics, reporting solutions, workflow automation, or data management capabilities.
Knowledge of artificial intelligence, intelligent agents, automation technologies, and process optimization techniques.
Strong analytical skills with demonstrated experience in data analysis, trend identification, reporting, and insight generation.
Understanding of cybersecurity and technology risk management concepts, frameworks, controls, and industry practices.
Familiarity with regulatory and control frameworks such as NIST, PCI, FFIEC, SOX, ISO 27001, and related industry standards.
Ability to work effectively in a fast-paced environment, manage competing priorities, and adapt to changing business needs.
Strong communication, stakeholder management, collaboration, and influencing skills.
Proven ability to drive continuous improvement, operational effectiveness, and process transformation initiatives.
Strong business acumen and ability to translate complex data into actionable insights for varied audiences.
Successful completion of all three levels of TD Operational Risk Management certification within 12 months of the start date.

Nice To Haves

Undergraduate degree in Computer Science/Computer Engineering/Risk Management is an asset.
Accreditation such as CISSP, CISM, CRISC, CEH, OSCP, OSCE and/or similar is preferred.

Responsibilities

Lead the development of cybersecurity risk data, analytics, and reporting capabilities, including risk aggregation, dashboarding, and insight generation to support executive reporting and risk oversight.
Design, implement, and maintain 2LoD tooling, workflows, and automation solutions using platforms such as Power BI, Power Apps, AI agents, Copilot technologies, and related tools to improve operational efficiency and scalability.
Oversee risk data ingestion, data management, and analytical processes across cybersecurity programs and business segments to enhance visibility, trend analysis, and reporting effectiveness.
Drive the evolution of 2LoD operating models, methodologies, and continuous improvement initiatives to strengthen data-driven risk management capabilities and execution effectiveness.
Partner with cybersecurity subject matter experts and stakeholders to deliver analytics, tooling, automation, and operational capabilities that support risk assessments, maturity evaluations, strategic planning, and risk management activities.
Develop and maintain execution tracking, performance reporting, work management processes, and portfolio insights to support planning, prioritization, and delivery of key cybersecurity risk initiatives.
Identify opportunities to leverage artificial intelligence, intelligent agents, automation, and emerging technologies to improve productivity, reduce manual effort, and enhance the effectiveness of risk management processes.
Effectively communicate analytical findings, trends, and insights to executive and senior management in a clear and actionable manner.
Maintain awareness of emerging cybersecurity risks, technology trends, regulatory developments, and industry best practices to support continuous enhancement of risk management capabilities.
Foster strong working relationships across business, technology, cybersecurity, and risk teams to enable collaboration and successful delivery of strategic objectives.