Information Security Specialist (US) Risk Controls & Governance

TD•Mount Laurel, NJ

1d•$98,160 - $159,270•Hybrid

About The Position

You will be a core member of a high performing team of technology and risk professionals who utilize their subject matter expertise in Identity and Access Management (IAM), technology controls, and information and /cyber security risk management to provide effective guidance on a broad range of cyber security IAM-related policies, standards and controls in compliance with the Enterprise Risk and Control Framework. As part of the Platforms and Technology (P&T) Global Risk and Compliance (GR&C) Asset Assessment Centre of Excellence (COE) team, you will play a key role in ensuring required IAM risk and control assessments are completed efficiently and with quality/care. Meaningful work is fueled by meaningful performance and career development conversations with your manager.

Requirements

Bachelor's degree preferred
Information security certification / accreditation an asset
7+ years of relevant experience
Expert knowledge of IT security and risk disciplines and practices

Nice To Haves

University degree.
2+ years of relevant experience in the area of IT risk, and technology, and/or information security, IAM control assessment/testing, and/or data analysis in a large organization.
Hands-on experience assessing or testing Identity and Access Management controls.
Working knowledge of IAM concepts, processes and common platforms (e.g. identity lifecycle management, PAM, MFA/SSO/federation, Active Directory / Entra ID, Ping Fed, CyberArk, and other equivalent IGA/PAM tools).
Proficient with Microsoft Power Apps.
Information Security Certification/Accreditation (e.g., CISA, CRISC, CISSP, CISM, or equivalent) (an asset).
Skills to identify, assess, and monitor technology and IAM risks including information security, cyber security, access governance, resilience, operations/change management quality, data quality/security, and IT compliance.
Advanced knowledge of one or more technology controls or security domains, with relevance to IAM disciplines and practices.
Strong critical thinking - ability to decompose complex issues into manageable pieces.
Ability to articulate ideas, share experiences and skills, and explain IAM findings clearly to both technical and non-technical audiences.
Sound to advanced knowledge of business, technology controls, security, IAM, and risk issues.
Firm commitment to staying informed/abreast of emerging cyber, and information security issues, IAM issues and industry trends.
Strength in prioritizing and managing your own workload to deliver quality results and meet timelines with limited guidance of management.
Knowledge of industry standards and best practices in the areas of technology, information and , information and, cyber security, access governance, and risk management and governance(e.g. NIST, ISO 27001, COBIT, SOX/ITGC frameworks).
High flexibility and are comfortability able working in a fluid, changing environment.
Strong communication, written and presentation skills (including production of clear, audit-ready documentation and evidence).
Ability to multi-task and manage multiple team and client demands concurrently.
Dedicated team player; comfortable with a dynamic work environment.
Diligent and resourceful in research, evidence collection, and information gathering.
Proficient with technology tools including Microsoft Power Apps.

Responsibilities

Update the risk and control assessments tracker on a regular basis, and prepare weekly, monthly, and quarterly risk and operational reporting focused on IAM control testing status and findings.
Conduct required IAM risk and control assessments and evaluate control procedure appropriateness, and .design and operating effectiveness, including identity lifecycle, access management, privileged access, authentication and related controls.
Guide partners on a broad range of IAM and technology controls, as well as and information and cyber security programs, policies, and standards.
Lead or contribute to the completion of risk and control design assessments for any assigned assets within the enterprise.
Contribute to the definition, development, and oversight of a global security management strategy and framework, with a focus on identity and access governance.
Ensure technology, processes, and governance are in place to monitor, detect, prevent, and react to both current and emerging IAM and technology and security threats against TDBG’s business.
Contribute to the development of on-going technology and IAM risk reporting, monitoring key trends and providing assurance that metrics to regularly measure control effectiveness for own area are met.
Adhere to internal IAM policies and procedures, technology control standards, and applicable regulatory guidelines.
Contribute collaboratively to the review of internal processes and activities and assist in identifying potential opportunities for improvement in IAM practices and governance.
Adhere to, advise, oversee, monitor and enforce enterprise frameworks and methodologies that relate to technology controls, IAM and information security activities.
Influence behavior to reduce risk and foster a strong technology risk management culture throughout the enterprise.