TOR Exercise Program Facilitator (US)

Work Location:

Charlotte, North Carolina

Hours:

40

Pay Details:

$87,000 - $151,000 USD

TD is committed to providing fair and equitable compensation opportunities to all colleagues. The included salary range for this role takes into account multiple factors that are considered in making compensation decisions. The base pay actually offered may vary based upon candidate's skills and experience, job-related knowledge, licensure and certifications, geographic location, and other specific business and organizational needs. As TD puts career development at the forefront of our colleague experience, it is not typical for an individual to be hired at or near the top of the range for their role.

As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

Line of Business:

Technology Solutions

Job Description:

This role will work as part of the Technology Operational Resilience (TOR) team within Enterprise Protect. The function of TOR is to ensure TD is ready and able to effectively prepare, prevent, respond and recover from any issues that would impede TD's ability to deliver services to its employees and customers.

The Exercise Program Facilitator should have a deep understanding of Cyber Exercises as well as strategic and administrative skills that help track metrics and program milestones. They support the overall success of the program in carrying out the vision of the Program Manager as well as coordinating with the team of Exercise Planners. This role helps ensure that the program deliverables are of the highest quality and follow playbooks and templates. They are a critical partner in how to manage the various aspects of people, processes, and technology to deliver best outcomes for the team of Cyber Exercise Planners (see below). Applicants should have a proven track record of being able to navigate successfully across organizational lines, a foundation of cyber security knowledge and demonstrated performance at managing complex systems with technology solutions and optimized recommendations for how to do things better.

Exercise planners are key components in the organization’s strategy to improve cyber preparedness and reduce risk. Cyber Exercise Planners contribute to the training and coordination between various cyber security and technology organizations and the Bank's lines of business. Exercise Planners design, develop, facilitate and evaluate cyber exercises, working with various technology and cyber security defense teams as well as Business Information Security Officers. Exercise planners work to formally assess the current level of resilience for applications hosted within TD and hosted/provided via third parties using a standardized methodology and framework and identify cyber risks, design threat scenarios, identify key stakeholders and participants, and execute the exercise against the planned scenarios. Exercises range from discussion-based to operations-based exercises, to include range-based exercises.  Planners will be expected to work in a dynamic, fast-paced environment to design multiple exercises on a yearly plan. Planners will receive broad exposure across multiple organizational units and levels of leadership.

This leader will work with Exercise Planners who are working across various technology teams and areas to formally assess the current level of resilience for applications hosted within TD and hosted/provided via third parties using a standardized methodology and framework.

Team responsibilities include: (These feel like TOR mission mandates rather than exercise team requirements)

• Work across technology, cyber and business areas to support the development of remediation and implementation plans for identified gaps and opportunities

• Work with technology owners to identify operational resilience risks in system design, operations and/or architecture

• Collaboratively develop options to reduce identified resilience gaps and measure progress

• Leverage industry relationships to understand best practices in technical resilience

• Develop and assess measures of operational resilience that allow appropriate risk visibility and management

• Drive identification and development of standards to increase TD's technology resilience

• Design and implement approaches to identify, measure and improve resilience in key areas such as technology concentration risk, third party provider risk, cloud risk, etc.

Depth & Scope:

• Participates on complex, comprehensive or large projects and initiatives

• Acts as a lead expert resource in technology controls / information security for project teams, th