AddressHours37.5Workplace ModelHybridPay Details
We're committed to providing fair and equitable compensation to all our colleagues. As a candidate, we encourage you to have an open dialogue with your recruiter and ask compensation related questions, including pay details for this role.
Department OverviewThe independent Operational Risk Management (ORM) team works in partnership with the business units and corporate groups of TD Bank Group to further the understanding and management of operational risk across the enterprise.
ORM for Enterprise Technology (ORM ETech) provides independent oversight and challenge to operational risk management activities executed by the Technology organization and business groups across the enterprise. They partner with the first line of defense (CIO & CISO organizations) in identifying, reporting, and mitigating Technology and Cybersecurity risk issues and provide subject matter expertise in Cybersecurity risk management practices. The group executes 2A requirements in support of the 3 lines of defense framework.
Job DetailsCybersecurity Risk Manager – ORM Enterprise Technology
The ORM Cybersecurity Risk Manager will partner with the first line of defense and other second line of defense teams to oversee and challenge the execution of risk management activities and leading practices/technologies used to keep up with the constantly evolving cyber threat landscape.
Reporting to the SM, ORM – Enterprise Technology, this role will have the following accountabilities:
- Conduct appropriate Technology risk identification, assessment, reporting, and monitoring based on a risk-based methodology in areas such as:
- Security configuration management;
- Network and endpoint protections;
- Infrastructure and application vulnerability management;
- Cybersecurity control/process adequacy, and
- Technology risk assessments.
- Execute 2nd line challenge activities required to support the ORM Framework, including but not limited to:
- Cybersecurity risks linked to strategic (sRCSA) and process RCSA (pRCSA) across Business Technology Solutions teams with a strong focus on the CISO organization;
- Key Risk Indicators,
- Cybersecurity risk scenario analysis;
- Internal and External cyber event analysis, and;
- Other areas as appropriate to support the technology areas in risk management.
- Effectively communicate risk management practices and methodologies and results of risk assessments to Executive and senior management in a supportive and collaborative manner and influence risk-based remediation.
- Lead efforts to improve the second line of defense for cybersecurity practice in areas such as document management, processes/procedures, work planning, and formalization of methods.
- Be a positive team player to consistently maintain high levels of integrity, motivation, and morale.
- Will be required to keep abreast of Technology and Cybersecurity emerging risks, the evolving Cyber threat landscape, best practices to address/mitigate Cybersecurity risks, and applicable Regulatory and Compliance requirements.
- Position will deal with senior management in technology areas and technology risk professionals.
- This role is looking for a highly seasoned professional with experience in Cybersecurity, technology, and/or risk management.
- Experience in the Cybersecurity, Technology Solutions, Risk Management, or Internal Audit field.
- An understanding of regulatory and Controls requirements: NIST standards, ISO 2700x PCI, FFIEC, SOX, and HIPAA.
- Ability to work in ambiguity, must be flexible to deal with changes in a fast paced and new environment, working closely with peers where subject matter expertise is required.
- Organizationally astute, with superior influencing, collaboration, and communication skills.
- Experience assessing risk and challenging the status quo.
- Proven ability to foster a cohesive team and promote a positive, high performing work environment.
- Expertise in working effectively in teams – requires a track record of knowledge across the organization.
- Strong analytical skills, including segment risk analysis, data analysis, and comparative analysis.
- In order to provide effective oversight and independent challenge the role requires the incumbent to have a good understanding of the following areas:
- Risk management frameworks and methodologies;
- Cybersecurity frameworks, operations, processes, controls, and tools;
- Technology operations and processes;
- Infrastructure and application security domains;
- Cloud service provider management, and;
- Regulatory requirements.
- Strong business and financial acumen.
- This role requires successful completion of all three levels of TD Operational Risk Management certification. Certification is not a requirement to apply for this role. The successful candidate will have 12 months from the start date in the role to complete required certifications. The required courses are available internally through TD Operational Risk Management.
- Undergraduate degree in Computer Science/Computer Engineering/Risk Management is an asset.
- Accreditation such as CISSP, CISM, CRISC, CEH, OSCP, OSCE and/or similar is preferred.
At TD we're guided by our purpose is to enrich the lives of our customers, communities and colleagues, and share a set of values that shape our culture and guide our behavior. In exchange for how our colleagues show up to help TD succeed, we are committed to delivering a colleague experience grounded in Impact, Growth and a Culture of Care. No matter where you work across TD, we empower you to make an impact at work and in your community, explore and grow your career and be part of our caring and inclusive culture.
Making Your Well-being a Priority
A supportive culture that promotes colleague well-being is core to who we are. At TD, we focus on total well-being with extensive programs to help colleagues assess, manage, and improve their well-being across four core pillars — physical, financial, social and mental/emotional. In addition, we champion a safe and inclusive work environment so colleagues feel a sense of belonging and feel supported in their personal and professional growth. Through our focus on well-being, we know that we can help our colleagues thrive, contribute to our culture of care, and support better business outcomes, because when colleagues feel their best, they're more likely to do their best.
Our Total Rewards Package
Our Total Rewards package reflects the investment we make in our colleagues to help them, and their families achieve their well-being goals. Total Rewards at TD includes a base salary, variable compensation, and several other key plans such as health and well-being benefits including medical, dental, vision & mental health coverage, savings and retirement programs, paid time off, banking benefits and discounts, career development, and reward and recognition programs.
How We Work
At TD, we believe in-person connections fuel collaboration and collective creativity. Our workplace experience empowers colleagues to do great work side-by-side at TD locations, while offering flexibility to work remotely where it makes sense for the work and team. Our teams work in one of three workplace models: Hybrid, Onsite and Primarily Remote. Wherever our colleagues are working, they'll always have access to the TD community and experience our culture of care.
Who We Are
TD is one of the world's leading global financial institutions and is the fifth largest bank in North America by branches. Every day, we deliver legendary customer experiences to over 27 million households and businesses in Canada, the United States and around the world. More than 95,000 TD colleagues bring their skills, talent, and creativity to the Bank, those we serve, and the economies we support. We are guided by our vision to Be the Better Bank and our purpose to enrich the lives of our customers, communities and colleagues.
TD is deeply committed to being a leader in customer experience, that is why we believe that all colleagues, no matter where they work, are customer facing. As we build our business and deliver on our strategy, we are innovating to enhance the customer experience and build capabilities to shape the future of banking. Whether you've got years of banking experience or are just starting your career in financial services, we can help you realize your potential. Through regular leadership and development conversations to mentorship and training programs, we're here to support you towards your goals. As an organization, we keep growing – and so will you.
At TD, we're committed to fostering an environment where all colleagues are encouraged to bring their authentic selves to work, experience equitable opportunities, and feel respected and supported. We're dedicated to building an inclusive workforce that reflects the diversity of the customers and the communities in which we live and serve.
Accommodation
Your accessibility is important to us. Please let us know if you'd like accommodations (including accessible meeting rooms, captioning for virtual interviews, etc.) to help us remove barriers so that you can participate throughout the interview process.
How We're Helping Make an Impact in Communities
TD has a long-standing commitment to help drive progress towards a more inclusive and sustainable future. That's why we launched the TD Ready Commitment in 2018, now a multi-year North American initiative. Under the TD Ready Commitment, we are targeting a total of $1 billion by 2030 in community giving four key, interconnected drivers of change: Financial Security, Vibrant Planet, Connected Communities, and Better Health. It's our goal to help support change, nurture progress, and contribute to making the world a better, more inclusive place for our customers, colleagues, and communities.
We look forward to hearing from you!
