Information Security Specialist (US)

Work Location:

Charlotte, North Carolina, United States of America

Hours:

40

Pay Details:

$87,000 - $151,000 USD

TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs. 

As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

Line of Business:

Technology Solutions

Job Description:

The Information Security Specialist defines, develops and/or implements Technology Controls / Information Security related policies, programs, tools and provides specialized expertise and guidance on assessing risks, identifying potential gaps and providing security solutions to mitigate risks and protect the Bank. Participates on projects of moderate to high complexity and provides complex reporting, analysis, and assessments at the functional, business line or enterprise level for own area.

Depth & Scope:

• Participates on complex, comprehensive or large projects and initiatives
• Acts as a lead expert resource in technology controls / information security for project teams, the business / organization and/or outside vendors
• Has advanced knowledge of organization, technology controls / security/ risk issues

Education & Experience:

• Bachelor's degree preferred
• Information security certification / accreditation an asset
• 7+ years of relevant experience
• Expert knowledge of IT security and risk disciplines and practices

Preferred Qualifications:

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or related field
• Advanced security certifications (CISSP, CISM, CRISC, or equivalent)
• 7+ years of experience in information security or cybersecurity
• 3+ years of experience in security operations or incident response
• Demonstrated experience with physical security systems and protocols

Technical Skills:

• Strong knowledge of cybersecurity frameworks (NIST, ISO 27001, etc.)
• Proficiency in security incident and event management (SIEM) tools
• Understanding of physical security concepts and controls
• Understanding of digital forensics and e-Discovery processes
• Strong familiarity with threat intelligence platforms and tools

Management & Leadership:

• Strong experience in risk assessments and methods
• Proven leadership and management in a technical domain.
• Proven ability to manage cross-functional teams
• Experience in developing and implementing security policies
• Strong organization and project management skills

Global Business Acumen:

• Experience working with international teams
• Understanding of regional security compliance requirements
• Knowledge of global security trends and threats
• Awareness of processes for 24/7 global operational environments

Soft Skills:

• Excellent communication and presentation skills
• Strong analytical and problem-solving abilities
• Ability to work under pressure in crisis situations
• Strategic thinking and decision-making capabilities
• Strong stakeholder management skills

Industry Knowledge:

• Understanding of enterprise security operations, including SOC design and management, security infrastructure and architecture, continuous monitoring and detection, and incident response procedures 
• Knowledge of incident management frameworks covering NIST Cybersecurity Framework, SANS IR methodologies, MITRE ATT&CK Framework implementation, and incident classification and triage
• Familiarity with threat intelligence methodologies including threat data collection and analysis, intelligence sourc