Senior Information Security Analyst - IAM RBAC & SOD

Senior Information Security Analyst - IAM RBAC & SOD

4 days ago Be among the first 25 applicants

Work Location: Toronto, Ontario, Canada

Hours: 37.5

Line Of Business: Technology Solutions

Pay Details: $81,600 - $115,200 CAD

TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience  compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job‑related knowledge, geographic location, and other specific business and organizational needs.

As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

The Workforce Identity and Access Management (WIAM) team has an enterprise-wide focus on Identity, authentication, authorization, and IAM governance. Ensuring users have the right access at the right time for the right reasons. WIAM is dedicated to supporting the safety and soundness of TD Bank and its workforce by defining best in class identity lifecycle management, authentication, authorization RBAC, and SOD domain controls.

WIAM provides centralized services which standardize the adoption of required controls with a strong focus on operational effectiveness and governance. This position is for an Information Security Specialist reporting to the Senior Manager, Information Security. This role is to act as a functional team member for the Role Based Access Control (RBAC) and Separation of Duties (SOD) domain controls focused on improving the bank’s Workforce IAM security posture.

TD Bank is currently seeking an experienced Identity and Senior Access Management Analyst to enhance and optimize the organization’s access management framework. The successful candidate will work with internal clients and technology teams to identify and define SOD policies. The ideal candidate will bring extensive expertise in implementing and automating segregation of duties policies and role-based security controls in complex enterprise environments.

• Contribute to SOD Policy creation and maintenance for assigned business applications, articulate and document Segregation of Duties policy requirements in collaboration with application subject matter experts.
• Guide stakeholders within defined parameters related to specific Technology Controls and Information Security programs, policies, standards, and incidents.
• Support development of technology risk reporting, monitoring key trends and defining metrics to measure control effectiveness for your own area.
• Support technology processes, help launch governance practices to monitor, detect, prevent, and react to current and emerging security threats to TD, specifically within the Workforce Identity and Access Management space.
• Facilitate the Emerging Tech program working with various stakeholders including third party vendors, TD executives and various internal teams.
• Be a subject matter expert in Technology Risk related policies, procedures, technology control standards and regulatory guidelines.
• Apply a teamwork philosophy with technology and partners, service, or platform owners to integrate all technology security components and address control gaps.
• Follow and promote relevant enterprise frameworks and methodologies (Agile methodologies including the Next Evolution of Work).
• Research and investigate regulatory compliance requirements, reporting and questions, support the team in resolving compliance, audit, and regulatory issues.
• Adhere to policies, procedures, technology control standards and regulatory guidelines.
• Contribute to internal activity and process review, flag windows for improvement.
• Follow relevant enterprise frameworks and methodologies.
• Influence behavior to reduce risk, foster a strong technology risk management culture.
• Assess, identify, and elevate issues appropriately when required.
• Contribute to…