L11 Segment Risk Specialist – Data, Technology & Cyber Risk Management; ATH

Position: L11 Segment Risk Specialist – Data, Technology & Cyber Risk Management (ATH 4268)
*
* Work Location:

** Toronto, Ontario, Canada
*
* Hours:

** 37.5
** Line of Business:
** Risk Management
** Pay Details:**$108,800 - $163,200 CADTD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience  compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs.

As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.
*
* Job Description:

**** Department Overview
** The Segment Risk Specialist (SRS) team partners with TD Insurance business units and corporate groups to advance the understanding and management of data, technology, and cyber risk. The successful candidate will provide independent oversight and challenge to the segment’s first line of defense, ensuring risk profiles are properly understood and managed in line with Operational Risk Appetite.
** Job Description
** The Segment Risk Specialist will collaborate with the 2A Segments team, 2A TDRM enterprise, and the first line of defense to oversee and challenge the execution of risk management activities and leading practices across data, technology, and cyber domains. This includes:
* Providing advisory services to executives and business segment leaders.
* Integrating knowledge of enterprise and segment strategy into program design, policy formulation, and operating standards.
* Anticipating emerging business, regulatory, and risk trends to recommend improvements.
* Serving as a source of expert advice to senior management and potentially leading teams of specialists.
* Advising on execution strategy and leading development/deployment of functional programs or initiatives.
* Solving unique and ambiguous problems with broad impact.
* Executing 2nd line challenge activities to support the ORM Framework, including:  + Supporting Review and Challenge of PRCSA/RCSA.  + Providing regular commentary and industry analysis.  + Leading issues management as issue coordinator or issuer.  + Ensuring programs/policies/practices are well managed, compliant, and aligned with business priorities.  + Reviewing and escalating Segment RAS measure limits & excesses, reporting to Segment CRO and Senior Management.  

+ Conducting technology and cyber scenario analysis.  + Challenging design and operating effectiveness testing performed by the first line.  + Overseeing Key Risk Indicators (KRI), Segment Deep Dives, and Target Reviews.  + Supporting other areas as appropriate for data, technology, and cyber risk management.
* Effectively communicating risk management practices and assessment results to executive and senior management.
* Influencing risk-based remediation.
* Maintaining high levels of integrity, motivation, and morale as a positive team player.
* Quality writing and maintaining enforceable technology policies with “must” statements.
** Job Requirements
*** Bachelor’s degree from a recognized university or equivalent experience.
* At least 10+ years of relevant experience within the Financial Services industry (1st/2nd line in data risk, data management/governance, technology & control function, or internal audit).
* At least 3 years in Operational Risk Management (2nd line ORM) for data; at least 5 years or technology/cyber.
* Experience engaging with SMEs across data governance, retention, quality, data impact assessments (DIA), incident management, change/problem management, and technical control standards.
* Understanding of regulatory and controls requirements: B-13, E-21, PCI, FFIEC, SOX, HIPAA, BCBS
239, OCC 1042, OSFI B-10/B-13/E-21, GLBA 501(b), COBIT, ISO 27001/22301, NIST.
* Ability to work in ambiguity and adapt to a fast-paced, evolving environment.
* Superior influencing, collaboration, and communication skills.
* Experience assessing…