Information Security Specialist - Cyber Resiliency

TD Bank•Mount Laurel, NJ

4d•Onsite

About The Position

The Information Security Specialist defines, develops, and/or implements technology controls and information security policies, programs, and tools. The role provides specialized expertise and guidance on assessing risks, identifying potential gaps, and developing security solutions to mitigate risks and protect the Bank. The specialist participates in moderately to highly complex projects and provides complex reporting, analysis, and assessments at the functional, business-line, or enterprise level for their area. The position serves as a lead expert resource in technology controls and information security for project teams, the business or organization, and outside vendors. It requires advanced knowledge of organizational, technology-control, security, and risk issues. Within the Scenario Testing work, the specialist may develop and use exercise scenarios, support tabletop and functional testing, document observations and remediation or risk exceptions, maintain auditable program documentation, and report on program metrics and outcomes. The team may also assist with preparation for and response to real-world crises. The role is primarily onsite in Mount Laurel, New Jersey; Charlotte, North Carolina; or Fort Lauderdale, Florida. The posting lists 40 hours and a salary range of $98,160–$159,270 USD. Occasional domestic travel is required; international travel is never required.

Requirements

At least 7 years of relevant experience.
Expert knowledge of IT security and risk disciplines and practices.
Advanced knowledge of organizational, technology-controls, security, and risk issues.
Bachelor's degree preferred.
Information security certification or accreditation is an asset.

Nice To Haves

Experience working across business, technology, and control functions in a large, complex, or regulated organization is strongly preferred.
Demonstrated ability to manage senior stakeholders, deliver complex assignments, and produce high-quality risk and governance reporting.
Relevant certifications or accreditations, such as CBCP, MBCI, ISO 22301, CRISC, CISM, PMP, or recognized exercise-design or emergency-management credentials.

Responsibilities

Define, develop, and/or implement technology controls and information security policies, programs, and tools.
Provide specialized expertise and guidance on risk assessment, identification of potential gaps, and security solutions to mitigate risk and protect the Bank.
Participate in complex, comprehensive, or large projects and initiatives.
Act as a lead expert resource in technology controls and information security for project teams, the business or organization, and outside vendors.
Provide complex reporting, analysis, and assessments at the functional, business-line, or enterprise level for the assigned area.
Develop exercise scenarios for crisis, communication, and decision-making tabletops and functional exercises involving cyber, fraud, physical security, operational resilience, business continuity, disaster recovery, and third-party plans.
Facilitate tabletop exercises and support functional testing, including testing service recovery capabilities against defined intolerable-harm thresholds and recovery plans against recovery time objectives and service-level agreements.
Write after-action reports, document observations, and track them through remediation or risk exception.
Create auditable program documentation and report on program metrics and success.
Optionally assist with real-world crisis response preparation and response activities.