Information Security Specialist - Technology Asset Governance and Risk Management

TD•Toronto, ON

10d•CA$96,900 - CA$136,800•Hybrid

About The Position

The Information Security Specialist defines, develops and/or implements Technology Controls / Information Security related policies, programs, tools and provides specialized expertise and guidance on assessing risks, identifying potential gaps and providing security solutions to mitigate risks and protect the Bank. Participates on projects of moderate to high complexity and provides complex reporting, analysis, and assessments at the functional, business line or enterprise level for own area.

Requirements

Bachelor's degree preferred
7+ years of relevant experience
Expert knowledge of IT security and risk disciplines and practices
Demonstrated experience managing or providing governance over technology critical assets, including identification, inventory maintenance, risk assessment, control monitoring, issue management, and reporting.
Background in risk, governance, and/or compliance, with the ability to apply enterprise policies, standards, regulatory expectations, and control requirements to technology environments.
Experience working with technology and cyber risk frameworks, control assessments, key risk indicators, remediation plans, and evidence-based reporting.
Ability to partner with business, technology, security, risk, compliance, audit, and governance stakeholders to drive accountability and support effective risk management outcomes.
Strong written and verbal communication skills, including the ability to prepare clear executive-ready summaries, risk commentary, governance materials, and status updates.
Sound analytical judgment, attention to detail, and ability to assess technology risk issues, control gaps, and remediation progress in a structured and defensible manner.

Nice To Haves

Information security certification / accreditation an asset
Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), or equivalent risk, audit, cybersecurity, or governance certifications are preferred.

Responsibilities

Participates on complex, comprehensive or large projects and initiatives
Acts as a lead expert resource in technology controls / information security for project teams, the business / organization and/or outside vendors
Has advanced knowledge of organization, technology controls / security/ risk issues