Information Security Specialist (US)

Work Location:

Charlotte, North Carolina, United States of America

Hours:

40

Pay Details:

$87,000 - $151,000 USD

TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs. 

As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

Line of Business:

Technology Solutions

Job Description:

The Information Security Specialist defines, develops and/or implements Technology Controls / Information Security related policies, programs, tools and provides specialized expertise and guidance on assessing risks, identifying potential gaps and providing security solutions to mitigate risks and protect the Bank. Participates on projects of moderate to high complexity and provides complex reporting, analysis, and assessments at the functional, business line or enterprise level for own area.

Depth & Scope:

• Participates on complex, comprehensive or large projects and initiatives

• Acts as a lead expert resource in technology controls / information security for project teams, the business / organization and/or outside vendors

• Has advanced knowledge of organization, technology controls / security/ risk issues

Education & Experience:

• Bachelor's degree preferred

• Information security certification / accreditation an asset

• 7+ years of relevant experience

• Expert knowledge of IT security and risk disciplines and practices

Preferred Qualifications :

• Have a foundational understanding of information technology and security concepts

• Have a foundational understanding of exercise and test concepts used to evaluate staff skill levels, operational risk and security effectiveness

• Ability to capture actions taken by the exercise participants through direct observation, monitoring of communications between participants and direct interaction with participants. Analyze the data and provide realistic and insightful conclusions

• Ability to design executive level summaries aimed at driving action and demonstrating success

• Have a strong sense of teamwork that enables you to work with peers and various levels of management

• Effective written and oral communication skills in both group and individual settings

• Ability to facilitate and control a room of people and guide them through the exercise in order to achieve the goals

• Proven record of being able to navigate successfully across organizational lines

• Ability to communicate threat actor techniques, tactics and procedures (verbal and written) with executives and stakeholders in non-technical terms while accurately encompassing risk, impact likelihood, containment and remediation activities

• Excellent organizational and analytical skills with an ability to prioritize conflicting tasks and handle multiple work efforts in a fast-paced environment

• The ability to manage multiple projects that deliver expected results on-time across standard milestones and in alignment with multiple Stakeholders' desired outcomes, adapting as required

• Experience in an operations focused Information Security role

• Familiarity with network security vulnerabilities, exploits and attacks

• Have a foundational understanding of range technology and exercise concepts used to evaluate participating teams                                                          

• Project Management proficiency:  Manages planning and delivery of exercise milestones, ensures design and development stay on target, identifies and escalates issues and risks, develops high quality deliverables and manages exercise lifecycle to conclusion

• Bachelor’s degree in Information Technology or related field