Sr Information Security Analyst - Identity Access Management

Work Location:
Mount Laurel, New Jersey, United States of America

Hours:
40

Pay Details:
$74,000 - $127,000 USD

TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs.

As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

Line of Business:
Technology Solutions
Job Description:

The Workforce Identity and Access Management (IAM) team has an enterprise-wide focus on Identity, authentication, authorization, and IAM governance. Ensuring users have the right access at the right time for the right reasons. WIAM is dedicated to supporting the safety and soundness of TD Bank and its workforce by defining best in class identity lifecycle management, authentication, authorization RBAC, and SOD domain controls. WIAM provides centralized services which standardize the adoption of required controls with a strong focus on operational effectiveness and governance.

Job Description

TD Bank is currently seeking an experienced Role-Based Access Control (RBAC) analyst to enhance and optimize the organization's access management framework. The resource will manage day to day Role based Access Controls as well as contribute to the design and implementation of a more advanced RBAC solution. The ideal candidate will bring extensive expertise in implementing and automating role-based security controls in complex enterprise environments.

Here's some of what you may be asked to perform:

• Develop and maintain role engineering methodologies.

• Create and optimize role hierarchies automation based on business processes and organization structure.

• Design and implement automated RBAC solutions across multiple systems and applications.
• Conduct role mining and analysis to identify optimization opportunities.
• Collaborate with security teams to ensure compliance with security policies.
• Document RBAC architecture and maintain technical documentation.
• Support technology processes, help launch governance practices to monitor, detect, prevent, and react to current and emerging security threats to TD, specifically within the Workforce Identity and Access Management space.
• Be a subject matter expert in Technology Risk related policies, procedures, technology control standards and regulatory guidelines.
• Apply a teamwork philosophy with technology and partners, service, or platform owners to integrate all technology security components and address control gaps.
• Follow and promote relevant enterprise frameworks and methodologies (Agile methodologies including the Next Evolution of Work)
• Research and investigate regulatory compliance requirements, reporting and questions, support the team in resolving compliance, audit, and regulatory issues.
• Adhere to policies, procedures, technology control standards and regulatory guidelines.
• • Contribute to definition of role management and separation of duties business framework and capabilities that align with TD Bank access management control standards.
• Interpret internal/external business issues and recommend best practices pertaining to RBAC and SOD Policies.

• Participates on projects of moderate to high complexity
• Acts as a key resource and subject matter expert in at least one technology niche/ field and/or line of business
• Advanced knowledge of one or more technology controls / security domains, disciplines and practices
• Proficient to advanced knowledge of organization, technology controls / security/ risk issues

• Bachelor's degree preferred
• Information security certification / accreditation an asset
• 5-7 years of relevant experience

• Minimum 5 years of experience developing and implementing RBAC framework, strategies, and methodologies in large, complex organizations.
• Minimum 5 years of hands-on experience implementing RBAC solutions in large, complex organizations.
• Proven track record of successful role automation projects.
• Deep understanding of Identity and Access Management (IAM) principles.
• Experience with enterprise-level IAM platforms and tools.
• Strong background in access governance and compliance frameworks.
• Experience implementing technology controls to address IAM related risks.
• Implementing high complexity IAM projects.
• Providing complex IAM reporting, analysis, and assessments.
• Advanced knowledge of RBAC concepts and implementation methodologies.
• Expertise in at least one major IAM platform, preferably SailPoint
• Experience with identity governance and administration (IGA) tools.
• Relevant Information Security Certification / Accreditation (CISSP, CISM, etc.).
• Sound knowledge of Technology Risk Treatment policies and procedures
• Sound knowledge of Jira, Microsoft Excel, PowerPoint, SharePoint, Teams, Confluence and Power BI.
• Ability to communicate effectively at all levels of the organization with an emphasis on senior leadership

• Understands and supports the Bank's Customer Service Strategy
• Considers the impact of decisions on the well-being of TD, its Customers and stakeholders
• Provides the highest level of Customer service when dealing with internal partners, vendors or our Customers - WOW at every opportunity
• Models quality service delivery at every interaction
• Leads and contributes to the ongoing improvement of the partner / Customer experience

• Be engaged in advancing and sustaining a unique, inclusive culture that reflects TD's diversity agenda, and create an extraordinary employee experience
• Participates fully as a member of the team and contribute to a positive work environment
• May provide leadership, training, and guidance to other team members
• Ensures ongoing communication with the team on the status / progress of projects and issues / points of interest
• Actively shares information and knowledge, and proactively learn from the expertise of others

• Domestic Travel - Occasional
• International Travel - Never
• Performing sedentary work - Continuous
• Performing multiple tasks - Continuous
• Operating standard office equipment - Continuous
• Responding quickly to sounds - Occasional
• Sitting - Continuous
• Standing - Occasional
• Walking - Occasional
• Moving safely in confined spaces - Occasional
• Lifting/Carrying (under 25 lbs.) - Occasional
• Lifting/Carrying (over 25 lbs.) - Never
• Squatting - Occasional
• Bending - Occasional
• Kneeling - Never
• Crawling - Never
• Climbing - Never
• Reaching overhead - Never
• Reaching forward - Occasional
• Pushing - Never
• Pulling - Never
• Twisting - Never
• Concentrating for long periods of time - Continuous
• Applying common sense to deal with problems involving standardized situations - Continuous
• Reading, writing and comprehending instructions - Continuous
• Adding, subtracting, multiplying and dividing - Continuous