Sr Mgr Information Security (US)
About The Position
The Senior Manager Information Security manages / leads a team of Technology Controls / Information Security experts in the development and/ or management of relevant strategies, programs, tools, frameworks and policies and provides specialized oversight / control / governance activities for a key business line/segment or transformational (change the bank) strategic initiative / program, liaising across the organization and primarily interfacing with executive and/or functional stakeholders to minimize overall technology risks to the Bank for own area. We are looking for someone to help shape the future of third party cyber risk management at TD. You will work closely with internal stakeholders spanning several teams within TD to align the third party cyber risk management programs with TD's risk appetite. You will participate in and lead projects of moderate to high complexity driving change to the third party cyber risk management function. Participate in the development and maintenance of the third party cyber risk management roadmap and accompanying processes and procedures. Depth & Scope: Oversees / manages a team or group(s) of moderate to large or in size, scope, risk and complexity. Provides thought leadership and is future-focused. Possesses excellent communication, negotiation and organizational skills specifically including the ability to present options in business terms to both IT and business staff including executives. Has a deep expertise and knowledge of Bank, technology standards and leading large and varied teams of professionals. Possesses expert knowledge of broad scope of technology controls / information security, technology, tools, processes and procedures, as well as broader organization issues.
Requirements
- Bachelor's degree preferred
- 10+ years of relevant experience
- Expert knowledge of IT security and risk disciplines and practices
- Demonstrated understanding of cloud security.
- Experience evaluating pen testing and vuln scanning methodologies
- Experience interpreting the security testing results.
- Familiarity / experience with Third-Party cybersecurity solutions, tools and framework
- Experience leading/ driving / implementing adoption of automation, AI, analytics and tools to improve assessment efficiency, scalability and process enhancements.
- Deep understanding of widely accepted information security frameworks, NIST Cybersecurity, HIPAA, PCI, Shared Assessments (SIG), etc.
- Experience leading / delivering complex, comprehensive or large projects and initiatives.
- Success communicating across multiple lines of defense.
- Track record of critically thinking and problem solving.
- Familiarity with industry standard procurement and GRC tooling and process.
- Must be eligible for employment under regulatory standards applicable to the position.
Nice To Haves
- Information security certification / accreditation an asset
- Information Security Certification / Accreditation, such as CCSP, CCSK, CCSA are an asset.
Responsibilities
- Manages / leads a team of Technology Controls / Information Security experts in the development and/ or management of relevant strategies, programs, tools, frameworks and policies.
- Provides specialized oversight / control / governance activities for a key business line/segment or transformational (change the bank) strategic initiative / program.
- Liaises across the organization and primarily interfaces with executive and/or functional stakeholders to minimize overall technology risks to the Bank for own area.
- Helps shape the future of third party cyber risk management at TD.
- Works closely with internal stakeholders spanning several teams within TD to align the third party cyber risk management programs with TD's risk appetite.
- Participates in and leads projects of moderate to high complexity driving change to the third party cyber risk management function.
- Participates in the development and maintenance of the third party cyber risk management roadmap and accompanying processes and procedures.
- Oversees / manages a team or group(s) of moderate to large or in size, scope, risk and complexity.
- Provides thought leadership and is future-focused.
- Presents options in business terms to both IT and business staff including executives.
- Develops, tests, and implements process or process enhancements.
- Formally documents process and procedures.
- Communicates process and procedure changes to diverse group of internal stakeholders.
- Supports regulatory exams, internal audits, and second line of defense challenges.
Benefits
- Base salary
- Variable compensation/incentive awards (e.g., eligibility for cash and/or equity incentive awards, generally through participation in an incentive plan)
- Health and well-being benefits
- Savings and retirement programs
- Paid time off (including Vacation PTO, Flex PTO, and Holiday PTO)
- Banking benefits and discounts
- Career development
- Reward and recognition
- Training programs
- Competitive benefits plan
- Regular career, development, and performance conversations with your manager
- Access to an online learning platform
- Variety of mentoring programs
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Manager
