Toronto-based cybersecurity risk manager conducting third-party assessments, reviewing controls, and documenting evidence on-site for TD. This full-time role works 37.5 hours weekly.
This manager executes end-to-end cybersecurity risk assessments for third parties providing products or services to TD. The work includes evidence review, control evaluation, deficiency documentation, and remediation support. Key areas include IAM, cloud security, incident response, and resilience.
Key Responsibilities:
- Conduct end-to-end third-party cybersecurity assessments using established procedures
- Review SOC reports, policies, and certifications for control effectiveness
- Request evidence and resolve outstanding items with stakeholders
- Document deficiencies, observations, and evidence-based conclusions
- Manage timelines and elevate delays or significant concerns
Requirements:
- 10+ years of cybersecurity and risk assessment experience
- Knowledge of IAM, vulnerability management, and security operations
- Familiarity with SOC 1, SOC 2, ISO 27001, or NIST
- Strong analytical judgment, communication, and documentation skills
- Post-secondary education preferred; CISSP is an asset
Apply cybersecurity assessment expertise, control knowledge, and documentation discipline to support TD's third-party risk program in Toronto.
Third Party Cybersecurity Risk Manager in Toronto employer: Skillhub Solutions Inc.
Scotiabank is an exceptional employer that fosters a dynamic and inclusive work culture, where innovation thrives and employees are empowered to grow. As a Technical Lead in the GWMS Digital Client Services team, you will benefit from comprehensive professional development opportunities, competitive compensation, and a collaborative environment that values your contributions. Located in a vibrant city, Scotiabank offers unique advantages such as access to cutting-edge technology and a commitment to employee well-being, making it a rewarding place to advance your career.
