Senior Information Security Analyst, Incident Management

Work Location:

Hours:

Line of Business:

Pay Details:

We’re committed to providing fair and equitable compensation to all our colleagues. As a candidate, we encourage you to have an open dialogue with a member of our HR Team and ask compensation related questions, including pay details for this role.

Job Description:

Department Overview

Building a World-Class, Diverse and Inclusive Technology Team at TD

We can’t afford to be boring. Neither can you. The scale and scope of what TD does may surprise you. The rapid pace of change makes it a business imperative for us to be smart and open-minded in the way we think about technology. TD’s technology and business teams become more intertwined as new opportunities present themselves. This new era in banking does not equal boring. Not at TD, anyway.

The Fusion Centre is a multi-disciplinary team with global 24/7 representation in Canada, United States, and Singapore providing timely response and coverage necessary to review, triage and investigate incidents.

We are looking for someone to support the Fusion Centre’s Fusion Incident Management (FIM) team. The FIM team facilitates comprehensive incident response and timely information sharing with Senior Executives on incidents impacting or of interest to the Bank. In collaboration with partner teams, FIM team members triage, coordinate taskforces, respond to and issue written communications on complex threats, events and incidents. Through its work, FIM builds and promotes shared awareness through effective incident coordination and communication. The position reports to the Senior Manager, Fusion FIM.

There’s room to grow in all of it.

We are looking for someone to join TD’s Fusion Incident Management (FIM) Team as a Senior Information Security Analyst. The FIM team is responsible for incident and crisis management, ensuring coordination and collaboration for response efforts. This team provides executive communications and incident coordination for cyber security/cyber-fraud incidents and proactive risk mitigation initiatives. As well, Fusion FIM supports other threat management teams such as Cyber-Fraud, Physical Security and Insider Risk.  In this role, you’ll be responsible for booking and hosting incident response/risk mitigation calls, creating and updating incident response documentation, and drafting and issuing communications. You will also play a role in shaping the evolution of this fast-growing team and the Fusion Centre’s approach to protecting the Bank. 

• Participate in the FIM team’s rotating on-call schedule; while on rotation, you may be called in outside of normal business hours to respond to an incident.
• Liaise and support assembly of stakeholders during cyber incidents, cyber-fraud events or crisis events, as well as facilitate taskforce meetings and communication bridges.
•  Build and maintain relationships, and during incidents work with internal stakeholders throughout the incident management lifecycle (i.e., Business LoBs, Technology groups, Fusion/cyber teams (CSOC/CSIRT), Threat Intelligence, Risk, Fraud, Physical Security, legal, and executive community).
• Engage with information sharing teams to create non-technical communication materials to inform critical stakeholders on emerging events that have or may have impact to TD to ensure consistent information is gathered and shared with appropriate stakeholders.
• Assist in managing the incident confluence site, JIRA task triaging and workstream assignment.
• Communicate to impacted teams and key stakeholders using appropriate language targeted to the audience.
• Facilitate timely engagement and coordinate incident response with core Fusion Centre partners during active information security events/incidents, by facilitating calls, taking minutes and tracking action items.
•  Engage key stakeholders to conduct a detailed internal assessment of TD’s readiness against a scenario experienced by the external party.
• Establish and maintain Fusion FIM communication and coordination playbooks (for internal incidents and external ‘celebrity’ events), maintain comprehensive list of Fusion Centre partners required for response and contribute to the continuous improvement of the team’s practice/processes.
• Contribute to the development and delivery of Fusion communication products.
• Contribute to regular Fusion Centre reporting.
• Build and maintain relationships with business units and key stakeholders.
• Adhere to policies, procedures, technology control standards and regulatory guidelines.
• Contribute to internal activity and process review, flag windows for improvement.
• Assess, identify and escalate issues appropriately.

• University Degree.
• 5-7 years of relevant experience; prior experience within the financial services industry will be highly regarded.
• Previous work experience in Crisis Management, Cyber Security, Threat/Cyber Intelligence, SOC, CSIRT (Cyber Security Incident Response Team), Fraud/Cyber-Fraud or incident management is considered a strong asset.
• Knowledge and background in Information Technology, Information Security, Fraud/Cyber-Fraud or Cyber Security considered an advantage.
• Information Security, Incident Management or Investigation certificate/accreditation/experience is a plus.
• Experience in incident coordination and preparedness with the ability to provide timely analysis and documentation for incident and exercise reporting.
• Strong written and verbal communication skills, able to exercise judgment and to communicate complex issues in a clear, simple and/or understandable manner.
• Experience working with executive audiences, senior leadership, and varying levels of stakeholders.
• Excellent organizational, analytical and problem-solving skills with a strong attention to detail.
• Excellent time-management and organizational skills to manage multiple deadlines and tasks with varying priority levels.
• Strong time management, organization skills and business acumen.
• Understanding of TD’s organizational structure, infrastructure, products and services.

Who We Are

TD Securities is one of the world's leading global financial institutions and is the fifth largest bank in North America by branches/stores. Every day, we strive to make every interaction, product, and experience remarkably human and refreshingly simple for over 27 million households and businesses in Canada, the United States and around the world. More than 95,000 TD colleagues bring their skills, talent, and creativity to foster deeper relationships, ensure disciplined execution, and build a simpler, faster banking experience. TD is deeply committed to being a leader in client experience, that is why we believe that all colleagues, no matter where they work, are client facing. Together, we are reimagining what banking can be for our clients, colleagues and communities.

Our Total Rewards Package
Our Total Rewards package reflects the investment we make in our colleagues to help them, and their families achieve their well-being goals. Total Rewards at TD includes a base salary and several other key plans such as health and well-being benefits, including medical coverage, paid time off, career development, and reward and recognition programs.

Additional Information:
We’re delighted that you’re considering building a career with TD. Through regular development conversations, training programs, and a competitive benefits plan, we’re committed to providing the support our colleagues need to thrive both at work and at home.
 
Colleague Development 

If you’re interested in a specific career path or are looking to build certain skills, we want to help you succeed. You’ll have regular career, development, and performance conversations with your manager, as well as access to an online learning platform and a variety of mentoring programs to help you unlock future opportunities. 

If you’re passionate about helping clients and building deep, lasting relationships, TD offers diverse career paths where you can grow your expertise and make a meaningful impact.  

We're committed to your success and foster a respectful workplace where diverse perspectives are valued, everyone has fair opportunities to grow, and you can unlock your full potential to achieve your career goals. Here at TD, we hire and develop the best.

Training & Onboarding
We will provide training and onboarding sessions to ensure that you’ve got everything you need to succeed in your new role.
 

Interview Process 
We’ll reach out to candidates of interest to schedule an interview. We do our best to communicate outcomes to all applicants by email or phone call.

Accommodation 

If you require an accommodation for the recruitment / interview process (including alternate formats of materials, or accessible meeting rooms or other accommodation), please let us know and we will work with you to meet your needs.