Information Security Specialist - Technology Asset Governance and Risk Management (US)

TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs.  As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

The Information Security Specialist defines, develops and/or implements Technology Controls / Information Security related policies, programs, tools and provides specialized expertise and guidance on assessing risks, identifying potential gaps and providing security solutions to mitigate risks and protect the Bank. Participates on projects of moderate to high complexity and provides complex reporting, analysis, and assessments at the functional, business line or enterprise level for own area. Depth & Scope: Participates on complex, comprehensive or large projects and initiatives Acts as a lead expert resource in technology controls / information security for project teams, the business / organization and/or outside vendors Has advanced knowledge of organization, technology controls / security/ risk issues Education & Experience: Bachelor's degree preferred Information security certification / accreditation an asset 7+ years of relevant experience Expert knowledge of IT security and risk disciplines and practices Preferred Qualifications : Demonstrated experience managing or providing governance over technology critical assets, including identification, inventory maintenance, risk assessment, control monitoring, issue management, and reporting. Background in risk, governance, and/or compliance, with the ability to apply enterprise policies, standards, regulatory expectations, and control requirements to technology environments. Experience working with technology and cyber risk frameworks, control assessments, key risk indicators, remediation plans, and evidence-based reporting. Ability to partner with business, technology, security, risk, compliance, audit, and governance stakeholders to drive accountability and support effective risk management outcomes. Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), or equivalent risk, audit, cybersecurity, or governance certifications are preferred. Strong written and verbal communication skills, including the ability to prepare clear executive-ready summaries, risk commentary, governance materials, and status updates. Sound analytical judgment, attention to detail, and ability to assess technology risk issues, control gaps, and remediation progress in a structured and defensible manner. Locations : Hybrid Onsite - Charlotte, NC; Mount Laurel, NJ; Fort Lauderdale, FL #TDCyberSecurity #Hybrid Physical Requirements: Never: 0%; Occasional: 1-33%; Frequent: 34-66%; Continuous: 67-100% Domestic Travel – Occasional International Travel – Never Performing sedentary work – Continuous Performing multiple tasks – Continuous Operating standard office equipment - Continuous Responding quickly to sounds – Occasional Sitting – Continuous Standing – Occasional Walking – Occasional Moving safely in confined spaces – Occasional Lifting/Carrying (under 25 lbs.) – Occasional Lifting/Carrying (over 25 lbs.) – Never Squatting – Occasional Bending – Occasional Kneeling – Never Crawling – Never Climbing – Never