Cyber Threat Risk Oversight

Senior Group Risk Specialist

The Senior Group Risk Specialist provides a comprehensive and diverse range of risk management expertise to business leaders. Leads and supports the implementation of appropriate risk frameworks and leading related management activities to mitigate enterprise and/or business-wide risk exposures for key business segment of the Bank or functional area. May provide oversight, commentary, and recommendations based on overall strategy and industry best practices.

Act as a cross-domain second-line subject matter expert specializing in Cyber & Information Security Risk, with primary focus on cyber threat intelligence, threat hunting, cyber detection capabilities, emerging cyber threats, artificial intelligence (AI) technology and cybersecurity risks, and TD Securities technology and cyber risk oversight. Provide independent review, challenge, and oversight across multiple technology and cyber risk areas to assess the effectiveness of risk management practices, governance, and control environments.

Undergraduate degree or technical certificate and/or 10+ years relevant experience Advanced knowledge of risk management governance, programs, policies, practices, operating frameworks & reporting for business supported and/or area of discipline to deliver objective guidance and independent challenge on initiatives. Knowledge of risk management environment, standards, regulations and mitigation Knowledge of current and emerging competitor and market trends Ability to contribute to strategic direction of the function and provide advice to senior leadership Skill in mentoring and coaching Skill in using advanced analytical software tools, data analysis methods and specialized reporting techniques Advanced ability to lead, plan, implement, and evaluate program/project activities to ensure completion of initiatives Ability to make an impact, influence, and achieve results with effective negotiation, problem-solving, and communication skills Skill in using computer applications including MS Office Ability to communicate effectively in both oral and written form Ability to work collaboratively and build relationships across teams and functions Ability to work successfully as a member of a team and independently Ability to exercise sound judgement in making decisions Ability to analyze, organize and prioritize work while meeting multiple deadlines Ability to handle confidential information with discretion

Deep experience in second-line technology and cyber risk oversight within a regulated financial services environment, with strong expertise in Cyber threat intelligence, threat hunting, threat analysis, and cyber detection capabilities Cybersecurity risk assessment, control evaluation, and effective challenge across multiple cyber risk domains Emerging technology risks, including artificial intelligence, machine learning, generative AI, and associated technology and cybersecurity risk management practices Cyber incident oversight, security monitoring, cyber assurance, and threat-informed risk management Technology and cyber risk governance supporting complex financial services businesses, preferably including capital markets and TD Securities operations Communicating complex cyber threat, AI, and technology risk matters to senior management, risk committees, and executive stakeholders while providing independent, risk-based challenge