Information Security Specialist (US)

TD•Fort Lauderdale, FL

2d•$98,160 - $159,270

About The Position

The Information Security Specialist defines, develops, and/or implements technology controls and information security policies, programs, and tools. The role provides specialized expertise and guidance for assessing risks, identifying potential gaps, and developing security solutions to mitigate risk and protect the Bank. It participates in projects of moderate to high complexity and provides complex reporting, analysis, and assessments at the functional, business-line, or enterprise level. The position participates in complex, comprehensive, or large projects and initiatives, serving as a lead expert resource in technology controls and information security for project teams, the business or organization, and outside vendors. It requires advanced knowledge of the organization and technology controls, security, and risk issues.

Requirements

7+ years of relevant experience.
Expert knowledge of IT security and risk disciplines and practices.
Bachelor's degree preferred.

Nice To Haves

Information security certification or accreditation.
Experience acting as a lead expert resource in technology controls or information security for project teams, the business, and/or outside vendors.
Experience identifying potential compliance gaps and providing security recommendations to mitigate risks.
Experience reviewing project requirements and planned technical designs for appropriate security patterns.
Ability to understand reporting metrics and identify patterns, themes, and improvement opportunities from KRI/KPI data.
Ability to translate technical control requirement gaps into business terms and facilitate discussions across technical, business, and risk partners.

Responsibilities

Define, develop, and/or implement technology controls and information security policies, programs, and tools.
Assess risks, identify potential gaps, and provide security solutions and recommendations to mitigate risk and protect the Bank.
Participate in complex, comprehensive, or large projects and initiatives.
Serve as a lead expert resource in technology controls and information security for project teams, the business or organization, and outside vendors.
Review project requirements and planned technical designs to ensure appropriate security patterns are included.
Analyze KRI/KPI data, identify patterns and opportunities to improve security, and provide complex reporting, analysis, and assessments.
Translate technical control gaps into business terms so partners understand the associated risks.
Facilitate conversations among technical, business, and risk partners to advance project efforts.