BISO - Information Security Specialist (US)

TD•Mount Laurel, NJ

3d•$98,160 - $159,270•Hybrid

About The Position

The Information Security Specialist defines, develops, and/or implements technology controls and information security policies, programs, and tools. The role provides specialized expertise and guidance to assess risks, identify potential control or compliance gaps, and recommend security solutions to mitigate risks and protect the Bank. The specialist participates in moderately to highly complex projects and provides complex reporting, analysis, and assessments at the functional, business-line, or enterprise level. The role participates in complex, comprehensive, or large projects and serves as a lead expert resource in technology controls, information security, and risk issues for project teams, the business or organization, and outside vendors. It consults with technology and business teams on technology risk management processes, assesses application risks, reviews project requirements and technical designs for appropriate security patterns, and helps partners address gaps through remediation or risk acceptance. The specialist also translates technical control gaps into business terms and facilitates discussions among technical, business, and risk partners. The position is hybrid and onsite in Charlotte, North Carolina; Mount Laurel, New Jersey; or Fort Lauderdale, Florida. The listed schedule is 40 hours. Occasional domestic travel is required; international travel is never required. Physical demands include continuous sedentary work, sitting, multitasking, sustained concentration, reading, writing, comprehension, and basic arithmetic. Other listed physical activities are occasional unless noted otherwise.

Requirements

Seven or more years of relevant experience.
Expert knowledge of IT security and risk disciplines and practices.

Nice To Haves

Bachelor's degree preferred.
Information security certification or accreditation is an asset.
Background in Technology Risk Management.

Responsibilities

Define, develop, and/or implement technology controls and information security policies, programs, and tools.
Assess risks, identify potential control and compliance gaps, and provide security recommendations to mitigate risks and protect the Bank.
Participate in complex, comprehensive, or large projects and initiatives.
Serve as a lead expert resource in technology controls, information security, and risk issues for project teams, the business or organization, and outside vendors.
Provide complex reporting, analysis, and assessments at the functional, business-line, or enterprise level.
Guide technology and business teams through technology risk management processes as a consultant from the BISO organization.
Review project requirements and planned technical designs to ensure appropriate security patterns are considered.
Conduct risk assessments and manage a portfolio of application risk assessments, including business-as-usual, project, and ad hoc assessments.
Support partners through risk-gap remediation or risk acceptance processes.
Translate technical control requirement gaps into business terms so partners understand the associated risks.
Facilitate discussions among technical, business, and risk partners to advance project efforts.