Information Security Specialist - AI Security Architect; B3617

Work Location

Toronto, Ontario, Canada

37.5

Technology Solutions

$ - $ CAD. This role is temporarily eligible for a pay premium above the posted salary range that is reassessed annually. You are encouraged to have an open dialogue with your recruiter who can provide more specific pay details for this role. TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience  compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role.

The base pay actually offered may vary based upon the candidate's skills and experience, job‑related knowledge, geographic location, and other specific business and organizational needs. As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

Building a World‑Class Technology Team  can't afford to be boring. Neither can you. The scale and scope of what TD does may surprise you. The rapid pace of change makes it a business imperative for us to be smart and open‑minded in the way we think about technology. TD's technology and business teams become more intertwined as new opportunities present themselves.

This new era in banking does not equal boring. Not at TD, anyway.

TD Information Security covers the development and management of security strategies, policies, and programs to assess, prioritize, and mitigate business risk with technology controls. Priorities include: mitigating and managing cyber security threats, ensuring systems availability, aligning with global regulatory risk and compliance requirements, managing systems and network complexity, and partnering with businesses for better technology delivery by providing advice on technology controls.

There's room to grow in all of it.

The AI Security Architect is responsible for designing, implementing, and governing security architectures for enterprise AI platforms and services. This role serves as the subject matter expert for securing Microsoft's AI and Copilot ecosystem and for developing Security Technical Implementation Guides (STIGs) and hardening standards to ensure compliant, secure deployment of AI solutions across regulated environments. The Architect partners with security engineering, cloud platform teams, compliance, and legal stakeholders to enable the safe and responsible adoption of AI technologies while maintaining strong risk management and regulatory alignment.

• Lead the security architecture design for AI platforms and services across the Microsoft ecosystem.
• Develop, maintain, and publish STIGs and security baselines for AI services, including configuration standards, risk controls, validation steps, and continuous compliance guidance.
• Security controls defined should include:
• Model access controls
• Data ingestion and indexing security
• Prompt and content filtering
• Training dataset governance
• Logging and monitoring
• Model endpoint exposure
• API security
• Identity, authorization, and tenant isolation
• Supply chain and tool‑assisted development workflows
• Author and manage security architecture frameworks for enterprise AI use cases as well as risk assessments for GenAI systems.
• Ensure control mapping aligned with NIST, CIS Benchmarks, and TD standards.
• Serve as the security authority on:
• Azure AI Search
• Azure OpenAI
• Azure Content Safety
• Azure Machine Learning
• Azure Foundry
• Microsoft 365 Copilot
• M365 Studio
• Git Hub Copilot
• Build secure design patterns for AI workloads.
• Provide hands‑on security guidance and architecture reviews for AI and GenAI pilots and production deployments.
• Partner with engineering teams to embed security by design into CI/CD pipelines.
• Review AI solutions for compliances with enterprise security policies, responsible AI principles and data protection and privacy requirements.
• Conduct security assessments of new AI services and releases prior to enterprise approval.

• Uni…