Dir. princ., Sécurité de l’information

Senior Manager, Information Security (DevSecOps Governance) Work Location: Toronto, Ontario, Canada Hours: 37.5 Line of Business: Technology Solutions Pay Details: na - na CAD TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Job Description: KEY ACCOUNTABILITIES: Develop, implement, and maintain security policies, standards, and guidelines for DevSecOps practices. Ensure adherence to regulatory and internal compliance requirements within DevSecOps processes. Ensure the seamless integration of security practices into DevOps workflows, reducing security vulnerabilities and improving the security posture. Collaborate with DevOps, development, and operations teams to embed security controls and practices into the software development lifecycle (SDLC). Provide guidance on secure coding practices, vulnerability management, and risk mitigation strategies. Maintain and update security policies, standards, and guidelines to align with regulatory and organizational requirements. Monitor and assess the effectiveness of security controls and make necessary adjustments to mitigate risks. Develop and deliver training programs to enhance the security awareness and capabilities of DevOps and development teams. Promote a culture of security awareness and continuous improvement within the organization. REQUIRED CORE SKILLS / EXPERIENCE: Strong understanding of DevSecOps principles and practices. Proficiency with CI/CD tools (e.g., GitHub, Jenkins, Azure DevOps) and security testing tools (e.g., Veracode, Snyk, Aqua, SonarQube). Knowledge of cloud security best practices and technologies, particularly in Azure and GCP. Experience with security frameworks and standards (e.g., NIST, ISO 27001, PCI DSS). Familiarity with infrastructure as code (IaC) tools (e.g., Terraform, Ansible). Experience with containerization and orchestration tools (e.g., Docker, Kubernetes). Excellent communication and collaboration skills. Strong problem-solving and analytical skills. Ability to work effectively in a fast-paced and dynamic environment. Detail-oriented with strong organizational skills. EXPERIENCE & EDUCATION: Bachelor's degree in computer science, Information Security, or a related field. 5+ years of experience in information security, with a focus on DevSecOps and cloud security. Experience in a financial services environment is preferred. Relevant certifications such as CCSP, AWS/Azure Security Specialty, or similar are highly desirable. Who We Are: TD is one of the world's leading global financial institutions and is the fifth largest bank in North America by branches/stores. Every day, we deliver legendary customer experiences to over 27 million households and businesses in Canada, the United States and around the world. Our Total Rewards Package:Our Total Rewards package reflects the investments we make in our colleagues to help them and their families achieve their financial, physical, and mental well-being goals. Additional Information:We’re delighted that you’re considering building a career with TD. Please be advised that this job opportunity is subject to provincial regulation for employment purposes. Accommodation:Your accessibility is important to us. Please let us know if you’d like accommodations to help us remove barriers so that you can participate throughout the interview process. We look forward to hearing from you! #J-18808-Ljbffr