Information Security Analyst II (US) - Risk Governance

TD•New York, NY

2d•$78,910 - $128,220•Onsite

About The Position

The Information Security Analyst II provides research, evaluation, assessment, operational, reporting and / or analytical support on Technology Controls / Information Security related programs and initiatives. May participate and provide advice / guidance on Cyber Security projects of moderate complexity.

Requirements

Bachelor's degree preferred
Information security certification / accreditation an asset
3-5 years of relevant experience
Requires sound knowledge of one or more technology controls / security domains, disciplines and practices
Requires sound knowledge of organization, technology controls / security/ risk issues

Nice To Haves

Master’s degree preferred in public policy, technology policy, cybersecurity, risk management, or a related field
Experience supporting governance, regulatory, or risk management initiatives, including development of frameworks, standards, or taxonomies
Strong understanding of technology risk domains (e.g., cybersecurity, operational risk, AI governance, or emerging technology risks)
Demonstrated ability to translate complex risk analysis into clear, executive-ready communication and reporting
Experience working across stakeholders (e.g., business, technology, policy, or external partners) to drive alignment and deliver outcomes
Analytical and research skills, including ability to assess emerging risks, regulatory expectations, and industry best practice

Responsibilities

Provides enterprise wide subject matter expertise on cyber security
Responds to Security Incidents, provides guidance, research and root cause analysis and develops remediation plans
Participates and provides advice / guidance on projects of low to moderate complexity within own area of specialization
Assembles and contributes enterprise level metrics for internal, managerial and regulatory reporting
Researches and documents enterprise level processes.
Creates Gap Analysis Reports
Analyzes enterprise wide reports, malware alerts, emerging threats and potential impact on Bank's state of controls.
Recommends appropriate action plans to management
Prioritizes and manages own workload in order to deliver quality results and meet timelines under guidance of management