Senior Information Security Analyst

Work Location

Toronto, Ontario, Canada

37.5

Technology Solutions

$76,800 - $115,200 CAD

TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience  compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs.

As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

• Contribute to Access Management Governance Team
• Provide Technology platform-specific subject matter expertise
• Develop privileged access use case, solution, and process design
• Responsible for developing and maintaining privileged access definitions, discovery methodologies, and compliance scorecards
• Support remediation and evidence coordination related to 2nd/3rd Line of Defense and Regulatory audits, exams, and assessments
• Facilitate control and maturity assessments
• Oversee compliance and hygiene for privileged accounts
• Develop and test privileged access use cases and alerts for the enterprise Security Information & Event Management (SIEM) solution
• Conduct regular access attestations/certifications focused on privileged access
• Support technology and business teams in the adoption of privileged access management controls and solutions
• Develop and support Endpoint Privilege Management (EPM) policies and governance
• Coordinate with business and technology stakeholders for feedback on requirements, customizations, and product functionality
• Develop and maintain governance process and procedure documentation for the PAM solutions utilized within the Bank.
• Evaluate emerging PAM technologies and make recommendations to improve technical posture for the Bank
• Develop on-going technology risk reporting, monitoring key trends and defining metrics to measure control effectiveness
• Ensure technology, processes, and governance are in place to monitor, detect, prevent, and react to both current and emerging technology and security threats to TD.

• Leverage deep technology expertise for own area of specialization to deliver and ensure that all areas across the organization that provision, manage, and support various technologies have the necessary tools, processes and documentation required to effectively execute on their respective mandates
• Work with vendor platform providers and engineering/operations peers to stay current on trends, products, frameworks, and applications
• Identify and effectively manage stakeholder engagement and impacts across the enterprise
• Interpret client needs, assess related requirements, and identify solutions to non-standard requests
• Apply best practices and knowledge of internal / external business issues to improve products or services in own discipline
• May develop and/or contribute to negotiations of third-party contracts/agreements
• Proactively identify emerging technologies and innovative solutions for building more robust controls and solutions

• Continuously enhance knowledge/expertise in own area and keep current with emerging industry trends, new technologies and best practices in the external market that can contribute to delivering effective client solutions
• Prioritize and manage own workload in order to deliver quality results and meet timelines
• Support a positive work environment that promotes service to the business, quality, innovation and teamwork and ensure timely communication of issues/ points of interest
• Participate in knowledge transfer with senior management, the team, other technical areas and business units
• Work effectively as a team, supporting other members of the team in achieving business objectives and providing client services
• Identify and recommend opportunities to enhance productivity, effectiveness and operational efficiency of the business unit and/or team

• Advanced knowledge of specific domain or range of cybersecurity frameworks, technology, tools, processes and procedures, as well as organization issues
• Advanced knowledge of TD applications, systems, networks, innovation, design activities, best practices, business / organization, and Bank standards
• Advanced experience, knowledge and skills in own discipline
• Works independently with minimal guidance
• Solves complex problems; takes a new perspective on existing solutions
• Reports to Privileged Access Management Governance Team Lead
• Strong troubleshooting skills
• Strong organization and communication skills

• University or post-graduate degree
• Strong academic background (e.g., accounting, cybersecurity, computer science)
• 3-5 years relevant experience…