Senior Manager, Information Security

*
* Work Location:

** Toronto, Ontario, Canada
*
* Hours:

** 37.5
** Line of Business:
** Technology Solutions
** Pay Details:
** 108, CADTD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience  compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs.

As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.
*
* Job Description:

** This position reports to the
** Associate Vice President, Risk Management Tools and Transformation.
** The
** Senior Manager, Risk Management Transformation
** is a results-driven individual, who thrives in a fast-paced, complex environment and is part of the Governance, Risk and Controls (GRC) team, and operates at the strategic organizational level to ensure alignment between functions, products and services to support the broader Global Security & Defense (GSD) and secure Global Technology Services (GTS) business objectives and priorities.

Successful candidates will have demonstrated experience in modernizing and scaling technology and cybersecurity governance, risk, and controls (GRC) capabilities across global financial services organizations. This role drives enterprise-wide transformation across risk assessment methodologies, controls lifecycle, issues management, governance, and
** GRC
* * platform capabilities and integrations. The leader will advance global risk maturity by embedding metrics, key risk indicators (KRIs), and automation to support proactive, data-driven decision-making.

Strong
** product
* * mindset,
** agile
* * experience, and commitment to improving and delivering
** automated risk and control
** solutions is required.
** Job Description
*** Lead and establish GRC Transformation and Operating model improvements through multi-year roadmaps that integrate stakeholder feedback, business requirements, and strategic priorities.
* Design, influence, and build sustainable services and operating models aligned to global regulatory expectations and supported with automated and consumable data and technology solutions.
* Adopt, define, and influence enterprise risk taxonomies, scoring models, and harmonized methodologies across cybersecurity, operational risk, and technology risk.
* Establish solutions that support and advance cybersecurity, technology, and business strategies, supported through ongoing monitoring, stakeholder engagement, and calibrated priorities.
* Monitor service delivery performance, identify risks, and escalate issues to ensure timely resolution and drive decisions as needed.
* Conduct regular portfolio reviews and manage contingency allocations as required.
* Serve as a point of contact for Risk Management product-level inquiries, fostering strong relationships with business and technology partners.
** Job Requirements
*** Maintains and develops industry-leading expertise in cybersecurity technology and trends, integrating security sensors and tooling data to improve automated insights and management
* Translates security policies, compliance mandates, and threat intelligence into consumable, automated product capabilities that prioritize security and speed
* Establish security metrics and key performance indicators for product effectiveness
* Lead security product planning sessions with stakeholders and development teams to synthesize requirements across disparate stakeholders.
* Ability to thrive within an active environment with a high level of ambiguity with the need to be agile and adapt to last-minute changes / events.
* Ability to navigate through a large organization and collaborate with multiple stakeholders to drive optimal outcomes and will have strong interpersonal skills to bridge the gap between different stakeholders.
* Exceptional attention to detail and organizational skills coupled with an ability to coordinate multiple priorities and deliver high quality work under pressure.
* Ability to present senior executives with adaptable interpersonal and communication skills to connect with different stakeholders.
* Data / Fact driven, with the ability to manage multiple initiatives, prioritize tasks, and meet tight deadlines in a fast-paced environment.
* Expert knowledge of broad scope of technology controls / information security, technology, tools, processes and procedures, as well as broader organization issues
* Experience in oversight / management of a team or group(s) of moderate to large or in size, scope, risk and complexity
** Experience**
* ** CISSP, CISM, CISA, CRISC
** or other information security certification preferred
* 10+ years,…