Group Risk Specialist – Information Security Risk Management

Work Location

Toronto, Ontario, Canada

37.5

Risk Management

-  CAD

TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience  compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs.

As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

The Second Line of Defense (2

LoD) independent Operational Risk Management (ORM) Technology and Cyber Security Risk Management (TCRM) team works in partnership with the business units and corporate groups of TD Bank Group to further the understanding and management of operational risk across the enterprise.

2

LoD TCRM provides independent oversight and challenge to operational risk management activities executed by the Technology organization and business groups across the enterprise. They partner with the first line of defense (CIO & CISO organizations) in identifying, reporting, and mitigating Technology and Cybersecurity risk issues and provide subject matter expertise in Cybersecurity risk management practices. The group executes 2A requirements in support of the 3 lines of defense framework.

The Technology and Cybersecurity Risk Management Risk Specialist will support the advancement of Technology and Cybersecurity Risk Management capabilities through data analytics, reporting, automation, process optimization, and technology enablement. The role will partner with cybersecurity subject matter experts and risk professionals across the first and second lines of defense to develop scalable solutions that enhance risk visibility, operational efficiency, and decision-making.

Reporting to the Senior Manager, Technology and Cybersecurity Risk Management, this role will have the following accountabilities:

• Lead the development of cybersecurity risk data, analytics, and reporting capabilities, including risk aggregation, dashboarding, and insight generation to support executive reporting and risk oversight.
• Design, implement, and maintain 2
  
  LoD tooling, workflows, and automation solutions using platforms such as Power BI, Power Apps, AI agents, Copilot technologies, and related tools to improve operational efficiency and scalability.
• Oversee risk data ingestion, data management, and analytical processes across cybersecurity programs and business segments to enhance visibility, trend analysis, and reporting effectiveness.
• Drive the evolution of 2
  
  LoD operating models, methodologies, and continuous improvement initiatives to strengthen data-driven risk management capabilities and execution effectiveness.
• Partner with cybersecurity subject matter experts and stakeholders to deliver analytics, tooling, automation, and operational capabilities that support risk assessments, maturity evaluations, strategic planning, and risk management activities.
• Develop and maintain execution tracking, performance reporting, work management processes, and portfolio insights to support planning, prioritization, and delivery of key cybersecurity risk initiatives.
• Identify opportunities to leverage artificial intelligence, intelligent agents, automation, and emerging technologies to improve productivity, reduce manual effort, and enhance the effectiveness of risk management processes.
• Effectively communicate analytical findings, trends, and insights to executive and senior management in a clear and actionable manner.
• Maintain awareness of emerging cybersecurity risks, technology trends, regulatory developments, and industry best practices to support continuous enhancement of risk management capabilities.
• Foster strong working relationships across business, technology, cybersecurity, and risk teams to enable collaboration and successful delivery of strategic objectives.

• Experience in Cybersecurity, Technology Solutions, Data Analytics, Risk Management, or Internal Audit.
• Strong experience with data analytics, reporting, visualization, and tooling, including Power BI, Power Apps, Microsoft Copilot, JIRA, Confluence, SharePoint, and related platforms.
• Experience developing dashboards, metrics, reporting solutions, workflow automation, or data management capabilities.
• Knowledge of artificial intelligence, intelligent agents, automation technologies, and process optimization techniques.
• Strong analytical skills with demonstrated experience in data analysis, trend identification, reporting, and insight generation.
• Understanding of cybersecurity and technology risk management concepts, frameworks, controls, and industry…