Information Security Analyst (BISO)

Work Location:

Hours:

Line of Business:

Pay Details:

We’re committed to providing fair and equitable compensation to all our colleagues. As a candidate, we encourage you to have an open dialogue with a member of our HR Team and ask compensation related questions, including pay details for this role.

Job Description:

Role Overview

The BISO L08 role provides Technology and Cybersecurity risk support, governance, assessment and oversight activities across APAC. The role partners with business, technology, application owners and control functions to identify and assess technology and cybersecurity risks, support the incorporation of appropriate controls into application and solution design, and assist with regulatory, audit and risk management requirements.

Key Accountabilities

Technology & Cyber Risk Assessments

• Lead assigned Technology Asset Risk Assessments (TARA) under the guidance and oversight of senior BISO team members, including reviewing information provided by business and technology owners and assessing technology assets against applicable risk criteria.
• Perform and support Control Gap Assessments (CGA), evaluating whether applicable security and technology controls are appropriately designed and documenting identified control deficiencies for remediation or formal risk treatment.
• Contribute to application and technology risk assessments across confidentiality, integrity, availability and applicable regulatory considerations using available architecture, design, control and risk information.

Application & Design Assessments

• Support security and technology risk assessments for new applications, material application changes and technology initiatives, including review of architecture and solution designs.
• Contribute to design assessments to determine whether security and technology controls are appropriately incorporated into proposed solutions and identify potential risks or control gaps requiring remediation.
• Review relevant artifacts such as architecture blueprints, system and process flows, TARA and CGA results, findings, security assessments and supporting evidence when contributing to risk assessments and documented outcomes.
• Assist in assessing whether system designs align with applicable security requirements and whether key security capabilities, including authentication, access control and cryptography, have been appropriately considered.

Risk Assessment & Control Gap Support

• Support 1B risk assessment and challenge activities by reviewing risk assessments, control gaps, findings and remediation plans under the guidance of senior BISO team members.
• Review identified control deficiencies, risk ratings, remediation strategies and supporting evidence and contribute to documenting and tracking issues through established governance processes.
• Provide guidance to Technology Asset Owners, Business Asset Owners and project teams within defined parameters on technology and cybersecurity risk requirements, controls and assessment activities.

APAC Governance & Regulatory Support

• Support APAC-specific technology and cybersecurity assessments, including jurisdictional and outsourcing assessments where required, working with Compliance, ORM and other control partners.
• Support regulatory reviews, audit activities, findings management, remediation efforts and evidence requirements across APAC.
• Contribute to risk assessments, observations and recommendations for technology initiatives and applications, supported by relevant assessment artifacts.

Stakeholder Engagement

• Work with application owners, technology teams, business stakeholders, Architecture, GSD, ORM, Compliance, Internal Audit and other SMEs to support the completion of assessments and resolution of identified risks.
• Communicate technology and cybersecurity risks, observations and assessment outcomes to technical and non-technical stakeholders.
• Establish effective relationships across business and technology partners, program managers and project teams to support risk management and governance activities.

Requirements

Required Qualifications

• University degree in Information Security, Cybersecurity, Computer Science, Information Technology, Risk Management, or a related discipline.
• 3-5 years of experience in Information Security, Cyber Risk, Technology Risk, IT Controls, Governance, Risk & Compliance (GRC), Audit or a related field.
• Experience supporting or conducting technology risk assessments, control reviews, audit activities or governance processes.
• Sound knowledge of technology controls, cybersecurity principles and risk management practices.
• Ability to assess and document technology and cybersecurity risks and control gaps.
• Strong stakeholder management and written and verbal communication skills.
• Ability to manage multiple priorities and deliver quality results within established timelines.

Preferred Qualifications

• Information Security certification such as CISSP, CISM, CRISC, Security+, or equivalent, considered an asset.
• Experience supporting TARA, CGA, technology risk assessments, audit reviews, regulatory examinations or technology governance activities.
• Experience working within a regulated financial services environment.
• Familiarity with NIST, ISO 27001, CIS Controls, COBIT or equivalent industry frameworks.
• Exposure to cloud technologies, application security, identity and access management, or technology outsourcing assessments.
• Experience with governance and risk management tools such as RSA Archer, as well as Agile delivery frameworks and Jira.

Who We Are

TD Securities is one of the world's leading global financial institutions and is the fifth largest bank in North America by branches/stores. Every day, we strive to make every interaction, product, and experience remarkably human and refreshingly simple for over 27 million households and businesses in Canada, the United States and around the world. More than 95,000 TD colleagues bring their skills, talent, and creativity to foster deeper relationships, ensure disciplined execution, and build a simpler, faster banking experience. TD is deeply committed to being a leader in client experience, that is why we believe that all colleagues, no matter where they work, are client facing. Together, we are reimagining what banking can be for our clients, colleagues and communities.

Our Total Rewards Package
Our Total Rewards package reflects the investment we make in our colleagues to help them, and their families achieve their well-being goals. Total Rewards at TD includes a base salary and several other key plans such as health and well-being benefits, including medical coverage, paid time off, career development, and reward and recognition programs.

Additional Information:
We’re delighted that you’re considering building a career with TD. Through regular development conversations, training programs, and a competitive benefits plan, we’re committed to providing the support our colleagues need to thrive both at work and at home.
 
Colleague Development 

If you’re interested in a specific career path or are looking to build certain skills, we want to help you succeed. You’ll have regular career, development, and performance conversations with your manager, as well as access to an online learning platform and a variety of mentoring programs to help you unlock future opportunities. 

If you’re passionate about helping clients and building deep, lasting relationships, TD offers diverse career paths where you can grow your expertise and make a meaningful impact.  

We're committed to your success and foster a respectful workplace where diverse perspectives are valued, everyone has fair opportunities to grow, and you can unlock your full potential to achieve your career goals. Here at TD, we hire and develop the best.

Training & Onboarding
We will provide training and onboarding sessions to ensure that you’ve got everything you need to succeed in your new role.
 

Interview Process 
We’ll reach out to candidates of interest to schedule an interview. We do our best to communicate outcomes to all applicants by email or phone call.

Accommodation 

If you require an accommodation for the recruitment / interview process (including alternate formats of materials, or accessible meeting rooms or other accommodation), please let us know and we will work with you to meet your needs.