BISO - Information Security Specialist (US)

TD Bank•Mount Laurel, NJ

6d•Hybrid

About The Position

The Information Security Specialist defines, develops and/or implements Technology Controls / Information Security related policies, programs, tools and provides specialized expertise and guidance on assessing risks, identifying potential gaps and providing security solutions to mitigate risks and protect the Bank. Participates on projects of moderate to high complexity and provides complex reporting, analysis, and assessments at the functional, business line or enterprise level for own area. Depth & Scope: Participates on complex, comprehensive or large projects and initiatives Acts as a lead expert resource in technology controls / information security for project teams, the business / organization and/or outside vendors Has advanced knowledge of organization, technology controls / security/ risk issues.

Requirements

Bachelor's degree preferred
7+ years of relevant experience
Expert knowledge of IT security and risk disciplines and practices

Nice To Haves

Information security certification / accreditation an asset
Background in Technology Risk Mgmt
Ability to consult and support others through gaps risk remediation or risk acceptance process
Review project requirements and planned technical designs to ensure proper security patterns are accounted for.

Responsibilities

Defines, develops and/or implements Technology Controls / Information Security related policies, programs, tools.
Provides specialized expertise and guidance on assessing risks, identifying potential gaps and providing security solutions to mitigate risks and protect the Bank.
Participates on projects of moderate to high complexity.
Provides complex reporting, analysis, and assessments at the functional, business line or enterprise level for own area.
Acts as a lead expert resource in technology controls / information security for project teams, the business / organization and/or outside vendors.
Act as primary consultant from BISO org to guide technology and business teams through technology risk mgt processes.
Ability to identify gaps in technology controls.
Identifying potential compliance gaps and providing security recommendation to mitigate risks.
Review project requirements and planned technical designs to ensure proper security patterns are accounted for.
Ability to consult and support others through gaps risk remediation or risk acceptance process.
Assessment - conducting risk assessments.
Managing a portfolio of application risk assessments whether BAU, Project, adhoc, or other.
Translate technical control requirement gaps to business terms to ensure partners are adequately informed about risk.
Facilitate conversations between technical, business, and risk partners to advance project efforts.