Sr. Manager, Information Security - U.S. Regulatory Remediation Assurance Lead

TD • Fort Lauderdale, FL

5d • $123,680 - $200,200 • Hybrid

About The Position

The Senior Manager, Information Security leads the U.S. CISO Regulatory Remediation Assurance program and a team of Technology Controls and Information Security professionals. The role provides leadership, oversight, and execution management for objective 1B testing and challenge activities covering regulatory remediation commitments, management action plans, and corrective actions. Responsibilities include Design Review (Gate 1), Design Effectiveness and Operational Readiness (Gate 2), sustainability testing, and closure readiness assessments.

The position establishes and oversees testing strategies, evidence reviews, risk-based assurance testing, and defensible conclusions about remediation effectiveness and sustainability. It reviews and approves testing results, observations, and conclusions; provides objective challenge of remediation design and implementation; identifies control gaps; and escalates material risks and concerns to U.S. CISO executive leadership and governance forums.

The role partners with remediation owners, Enterprise Testing, CRQA, Internal Audit, Governance, Second Line of Defense, and Technology stakeholders. It also establishes forecasting, resource management, quality control, reporting, and governance processes, and reports engagement status, results, observations, and emerging risks. The assurance program is expected to expand to include Critical and High-rated Internal Audit findings and Self-Identified issues, using a consistent risk-based methodology to validate remediation design, implementation, effectiveness, and sustainability.

The position is listed as onsite hybrid, with locations in Charlotte, North Carolina; Mount Laurel, New Jersey; and Fort Lauderdale, Florida. The stated schedule is 40 hours.

Requirements

• Minimum 10 years of progressive relevant experience in Information Security, Technology Risk, Internal Audit, Regulatory Remediation, Assurance Testing, Compliance, or related disciplines.
• Minimum 5 years of people leadership experience, including managing teams responsible for assurance, testing, audit, risk, or regulatory programs.
• Demonstrated experience designing, executing, and overseeing risk-based assurance testing, control assessments, validation reviews, and remediation effectiveness testing.
• Extensive experience supporting regulatory remediation programs, management action plans, regulatory commitments, consent orders, MRAs, MRIAs, or other regulatory enforcement actions.
• Strong understanding of governance, risk management, internal controls, and assurance methodologies, including control design, operating effectiveness, sustainability validation, and issue closure assessments.
• Experience engaging with regulatory agencies, Internal Audit, Second Line of Defense functions, and executive governance committees.
• Proven ability to provide objective challenge, identify control deficiencies, assess remediation effectiveness, and communicate findings to executive leadership.
• Strong knowledge of cybersecurity, technology risk, identity and access management, data protection, logging and monitoring, technology change management, and other core information security domains.
• Experience establishing quality assurance, quality control, reporting, resource planning, and governance processes for large-scale testing or assurance programs.
• Exceptional written and verbal communication skills, including the ability to prepare and present executive-level reporting and defensible assurance conclusions.
• Ability to manage multiple complex initiatives simultaneously in a highly regulated environment while balancing competing priorities and stakeholder expectations.
• Bachelor's degree in Information Technology, Cybersecurity, Risk Management, Business Administration, or a related field required in the preferred qualifications section.
• Experience within a large financial institution or another highly regulated industry.
• Experience leading assurance, audit, regulatory remediation, validation, or issue management programs involving regulators such as the OCC, Federal Reserve, FDIC, or equivalent regulatory bodies.
• Experience overseeing closure readiness assessments and sustainability validation activities for significant regulatory findings and audit issues.

Nice To Haves

• Master's degree preferred.
• Information security certification or accreditation is an asset; one or more of CISA, CISSP, CRISC, or CISM is strongly preferred.
• Familiarity with Three Lines of Defense models and governance frameworks.

Responsibilities

• Provide leadership, oversight, and execution management for the U.S. CISO Regulatory Remediation Assurance program.
• Oversee objective 1B testing and challenge activities for regulatory remediation commitments, management action plans, and associated corrective actions.
• Manage Gate 1 Design Reviews, Gate 2 Design Effectiveness and Operational Readiness reviews, sustainability testing, and closure readiness assessments.
• Lead a team responsible for developing testing strategies, reviewing remediation evidence, executing risk-based assurance testing, and producing conclusions regarding remediation effectiveness and sustainability.
• Ensure consistent application of testing standards, methodologies, and quality expectations across assigned reviews.
• Review and approve Regulatory Remediation Assurance testing results, observations, and conclusions.
• Provide objective challenge of remediation design and implementation, identify potential control gaps, and escalate material risks, testing exceptions, and remediation concerns to U.S. CISO executive leadership and governance forums.
• Partner with remediation owners, Enterprise Testing, CRQA, Internal Audit, Governance, Second Line of Defense, and Technology stakeholders to support remediation oversight and align testing with regulatory expectations and management commitments.
• Establish and maintain forecasting, resource management, quality control, reporting, and governance processes for assurance reviews.
• Oversee reporting on engagement status, results, observations, and emerging risks, communicating developments to leadership, remediation stakeholders, and governance committees.
• Oversee expansion of the U.S. CISO 1B Assurance Testing program to include Critical and High-rated Internal Audit findings and Self-Identified issues, in addition to regulatory remediation activities.
• Apply a consistent risk-based assurance methodology to validate remediation design, implementation, effectiveness, and sustainability.
• Drive continuous improvement across the Regulatory Remediation Assurance program.

Benefits

• Health and well-being benefits
• Savings and retirement programs
• Paid time off, including Vacation PTO, Flex PTO, and Holiday PTO
• Banking benefits and discounts
• Career development
• Reward and recognition
• Variable compensation or incentive awards, including potential cash and/or equity incentive awards

What This Job Offers

• Job Type: Full-time
• Career Level: Senior