Head of Cloud Infrastructure and Resiliency Risk Management
Location : New York, New York, United States of America
Hours : 40
Compensation : $200,000 - $280,000 USD
Line Of Business : Risk Management
Job Description : Enterprise Technology provides independent operational risk management oversight and challenge to operational risk management activities executed by the Technology organization and business groups to the management of Cybersecurity and technology risks across the enterprise. They partner with the first line of defense (CIO & CISO organizations) in identifying, reporting, and mitigating Cybersecurity risk issues and provide subject matter expertise in the Cybersecurity risk management practices, operational risk framework and Cybersecurity risks / processes / controls. The group will execute 2A requirements in support of 3 lines of defense framework.
Responsibilities
- Provides people management leadership by hiring the best talent, setting goals, developing staff, managing employee performance and compensation decisions, promoting teamwork and handling disciplinary actions as required.
- Advances TDBG's People Strategies to attract, retain, develop and engage a highly qualified and diverse human resource base to achieve business objectives and create a unique and inclusive employee experience.
- Leads the assessment, monitoring and reporting on technology risks inherent to technology activities, including cyber, resilience, security, and technology risk concepts.
- Oversees a team of senior risk managers as they lead second line challenge and examinations and tracks accountable parties' remediation activity.
- Maintains accountability for the integrity of the enterprise's adherence to the technology risk management framework challenging control partners.
- Interprets industry experience to determine appropriate key risk indicators and monitor best practices that drive technology risk and regulatory compliance.
- Designs appropriate risk appetite for cyber, resiliency and technology and establish key risk indicators and monitor effectiveness.
- Performs oversight and follow-up on non‑compliant recovery and disaster preparedness controls at an application, deployment, and asset level.
- Awareness of emerging risks and evaluate the ongoing effectiveness of the technology / cyber / resilience risk appetite, taking into account changes in strategy, the operating environment, operations, regulatory requirements.
- Manages and builds a team of SMEs spanning cloud, tech security, cyber risk and ops continuity.
- Fosters awareness in information security domains, including policies and standards, risk and control assessments, access controls, regulatory compliance, technology resiliency, risk and control governance and metrics, incident management, secure systems development lifecycle, vulnerability management, and data protection.
- Partners with VP, TMO, Program Delivery Lead and Technology Owner to remove obstacles.
- Assists in providing periodic examination status updates and contribute to internal reporting and tracking related to examinations and regulatory findings.
- Provides long‑term view in execution of solution standards across CTO to ensure alignment with overall business strategy and future state.
Qualifications
Bachelor's Degree required; Master’s Degree is preferred.10+ years of risk management and / or technology experience with at least five years of managing a large cross‑functional team and influencing senior level management and key stakeholders.Excellent relationship management, influencing, negotiating, and interpersonal skills. Ability to work effectively with all levels of the organization and balance the needs of multiple functions.Demonstrated experience across domains (e.g., enterprise security architecture, compute services, storage, networking, virtualization, data center, integration architecture (API), orchestration technologies, application development lifecycle management, and service delivery).Uses relationships with senior stakeholders to coordinate technology risk management efforts and regional groups and drive execution of technology risk deliverables and issue resolution.Understanding of information security and risk management challenges, issues mitigations and remediation in a multi‑national enterprise environment and able to articulate them.High level experience with modern technologies such as public and private cloud (AWS, Azure, etc.), containerization and orchestration (Kubernetes), & microservice architectures.Understands the foundation of the RCSA process and the identification of risks and controls.Previous experience developing and executing on strategies and delivering superior results in both the short and long term.Previous experience as a Security Architect, DevOps Engineer, Cloud Security Engineer, ideally within a regulated financial services environment.Demonstrated ability to manipulate and leverage data sources to find meaningful risk dimensions through use of MS Excel skills to drive risk insight.Previous team leadership experience, fostering a positive team environment and can‑do culture with reports.Well versed in application and secure software design principles, common attack patterns, and frameworks, etc.Proven ability in leveraging deep subject matter expertise to align teams to a central vision, while also listening and engaging others to provide input in the shaping of that vision.Expertise in working effectively in teams – requires a track record of working cross‑organizationally and with multiple stakeholders at varying levels.Understands the business' history, pain points and culture.Can translate the program vision into the business "component parts", effectively translating complex into simple.Embraces what needs to change, and advocates this across the business.Interview Process
We’ll reach out to candidates of interest to schedule an interview. We do our best to communicate outcomes to all applicants by email or phone call.
Training & Onboarding
We will provide training and onboarding sessions to ensure that you’ve got everything you need to succeed in your new role.
Accommodation
TD Bank is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, status as a protected veteran or any other characteristic protected under applicable federal, state, or local law.
If you are an applicant with a disability and need accommodations to complete the application process, please email TD Bank US Workplace Accommodations Program at USWAPTDO@td.com . Include your full name, best way to reach you and the accommodation needed to assist you with the applicant process.
Equal Opportunity Employer
TD Bank is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, status as a protected veteran or any other characteristic protected under applicable federal, state, or local law. If you are an applicant with a disability and need accommodations to complete the application process, please email TD Bank US Workplace Accommodations Program at USWAPTDO@td.com . Include your full name, best way to reach you and the accommodation needed to assist you with the applicant process.
#J-18808-Ljbffr