Third Party Cybersecurity Risk Manager

Toronto-based cybersecurity risk manager conducting third-party assessments, reviewing controls, and documenting evidence on-site for TD. This full-time role works 37.5 hours weekly.

This manager executes end-to-end cybersecurity risk assessments for third parties providing products or services to TD. The work includes evidence review, control evaluation, deficiency documentation, and remediation support. Key areas include IAM, cloud security, incident response, and resilience.

Key Responsibilities:

• Conduct end-to-end third-party cybersecurity assessments using established procedures
• Review SOC reports, policies, and certifications for control effectiveness
• Request evidence and resolve outstanding items with stakeholders
• Document deficiencies, observations, and evidence-based conclusions
• Manage timelines and elevate delays or significant concerns

Requirements:

• 10+ years of cybersecurity and risk assessment experience
• Knowledge of IAM, vulnerability management, and security operations
• Familiarity with SOC 1, SOC 2, ISO 27001, or NIST
• Strong analytical judgment, communication, and documentation skills
• Post-secondary education preferred; CISSP is an asset

Apply cybersecurity assessment expertise, control knowledge, and documentation discipline to support TD's third-party risk program in Toronto.