Information Security Specialist (US)

TD Bank•Charlotte, NC

1d•Hybrid

About The Position

The Information Security Specialist defines, develops, and/or implements Technology Controls and Information Security policies, programs, and tools. The role provides specialized expertise and guidance in assessing risks, identifying potential gaps, and recommending security solutions to mitigate risk and protect the Bank. The specialist participates in projects of moderate to high complexity and provides complex reporting, analysis, and assessments at the functional, business-line, or enterprise level. The position contributes to complex, comprehensive, or large initiatives and serves as a lead expert resource in technology controls and information security for project teams, business partners, the organization, and/or outside vendors. It requires advanced knowledge of organizational, technology controls, security, and risk issues. The listed locations are Charlotte, North Carolina; Mount Laurel, New Jersey; and Fort Lauderdale, Florida, with onsite and hybrid work options noted.

Requirements

7+ years of relevant experience.
Expert knowledge of IT security and risk disciplines and practices.

Nice To Haves

Bachelor's degree preferred.
Information security certification or accreditation is an asset.
Experience serving as a lead expert resource in technology controls and information security for project teams, the business, and/or outside vendors.
Experience identifying potential compliance gaps and recommending security measures to mitigate risks.
Experience reviewing project requirements and planned technical designs for appropriate security patterns.
Ability to understand reporting metrics and identify patterns, themes, and opportunities to improve security using KRI/KPI data.
Ability to translate technical control requirement gaps into business terms.
Ability to facilitate conversations among technical, business, and risk partners.

Responsibilities

Define, develop, and/or implement Technology Controls and Information Security policies, programs, and tools.
Assess risks, identify potential gaps, and provide security solutions and recommendations to mitigate risks and protect the Bank.
Participate in complex, comprehensive, or large projects and initiatives.
Serve as a lead expert resource in technology controls and information security for project teams, the business or organization, and outside vendors.
Provide complex reporting, analysis, and assessments at the functional, business-line, or enterprise level.
Review project requirements and planned technical designs to ensure appropriate security patterns are accounted for.
Interpret KRI/KPI reporting metrics, identify patterns and opportunities, and recommend ways to improve security.
Translate technical control gaps into business terms so partners understand the associated risks.
Facilitate conversations among technical, business, and risk partners to advance project efforts.