Information Security Specialist (US) - Vulnerability Governance

Work Location:

Mount Laurel, New Jersey, United States of America

Hours:

40

Pay Details:

$87,000 - $151,000 USD

TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs. 

As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

Line of Business:

Technology Solutions

Job Description:

TD's enterprise Vulnerability Management (VM) capability is managed as part of a multi-team organizational structure known as the VM Platform, which is a centralized organizational structure accountable for the direction, implementation, and effective and continuous delivery of all activities pertaining to the enterprise VM Operating Directive (VMOD).

The VM Governance function is part of the VMOD. As a member of the Governance function, the Information Security Specialist supports the VM Platform through operational oversight over all VM Platform functions, including:

• Vulnerability Exception Management & Risk Analysis

• Vulnerability Thematic Problem Analysis

• Vulnerability Policies, Frameworks, Standards, Procedures

• Vulnerability Platform Operational Oversight

• Vulnerability Platform Capability Integrations

As a central point of contact for the VM Platform, the position provides internal TD stakeholders with a dedicated, knowledgeable, and supportive resource in facilitating matters related to vulnerabilities within the TD environment. This position also provides thought leadership and outcome-oriented approaches to complex VM problems spanning across multiple stakeholders, balancing operational considerations against the objectives of the VM Platform.

• Mitigate the risk to TD through the assessment, control, and reporting of exceptions to the enterprise Vulnerability Management operational objectives.

• Leverage data driven insights to identify and maintain a register of operational impediments to the VM Platform's operational objectives, subsequently planning, executing, and driving collaboration and resolution of thematic issues with applicable stakeholders.

• Contribute to the direction of the enterprise VM Platform through the development of supporting vulnerability policies, frameworks, standards, control objectives, guidelines, and operational procedures.

• Contribute to the enterprise Vulnerability Management strategy by facilitating ongoing centralized collaboration and enforcing accountability amongst key VM Platform function leads.

• Support the integration of enterprise vulnerability management capabilities, including technology solutions, governance structures, and supporting processes.

Depth & Scope:

• Participates on complex, comprehensive or large projects and initiatives

• Acts as a lead expert resource in technology controls / information security for project teams, the business / organization and/or outside vendors

• Has advanced knowledge of organization, technology controls / security/ risk issues

Education & Experience:

• Bachelor's degree preferred

• Information security certification / accreditation an asset

• 7+ years of relevant experience

• Expert knowledge of IT security and risk disciplines and practices

Preferred Qualifications :

• Strong familiarity with navigating & operating within enterprise size organizations.

• Strong experience in developing and supporting IT risk governance practices.

• Experience defining key security controls and control testing.

• Familiarity & desire to cultivate knowledge related to vulnerability management operations in areas such as:

• vulnerability intelligence,

• vulnerability scanning,