New 
US - IT - Info Security Analyst V
 Spectraforce Technologies | |
 United States, New Jersey, Mount Laurel | |
 Jul 16, 2026 | |
| # of positions: 1Start Date: Sept 1st Duration: 12 months Extension possible: YesConversion Possible: No Billing Cost Center: 050-3402 - TD U.S.Schedule : M-F core business hours OT: As neededRotation: No Budget/TD Bill Rate: $133.29 Work Location:Remote, Onsite, or Hybrid: Onsite - 2 days in office - Potential of 4 days down the road timeline unknown Anchor Days (if applicable): No Address: Mt Laurel - Technology Center - 17000 Horizon Way, Mount Laurel, New JerseyTravel Required: No Possibility of any Additional Upcoming Furlough: No STORY BEHIND THE NEED:Reason for request/why opened: Replacement Scope of Project: Currency programTeam Size/Culture: 4 ppl Training Period: 2 months Selling Points of Position (CVP): Working within a leading FI organizationCANDIDATE PROFILE DETAILS:Degree/Level of Education: Associate degree in technology Certifications Required: No - but CISSP or CISM or similar industry certification/training would be nice to have Years of Overall Experience: 5 + in Info Sec How will performance be measured: No Preferred/Ideal Candidate Background:Info sec exp application currency focus SUMMARY OF THE ROLE:Business Information Security Officer (BISO) in support of the Currency Factory for US applications.A dedicated resource is required to support Currency Factory activities, including oversight of currency uplifts (updating of applications and their infrastructure off of end of support tools, infrastructure, solutions), validation of TARAs and CGAs, tracking control exceptions, and ensuring applications meet TD Bank standards and the scope of the Currency Factory. This role also provides critical reporting and visibility to the U.S. GR&C team, enabling proactive identification of out-of-compliance assets and supporting overall portfolio alignment.Typical Day-to-Day Responsibilities Attending meetings / standups to identify scope of "Currency Factory Work" Working with application assigned BISO to review assessments TARAs and CGAs**Update those assessments (working with BISO, the BAO and TAO) to complete.Ensure that project stays within defined scope of Currency Factory Work Report to both BISO teams and Currency Teams to keep both informedParticipate in multiple meetins weekly - with uplift projects, with the Currency Factory Team, and the US BISO Team. Weekly tracker and reporting to be done to identify work completed, concerns identified. Track overall success of Currency Uplifts against reducing asset vulnerabilities, control gap assessments and End of Live/Support concerns++ TARA - Technology Asset Risk Assessment - identifies inherent risk - down with tech owner CGA - Control Gap Assessment - identifies residual risk - done with business owner BAO = Business Asset Owner - TAO = Technology Asset OwnerHow much time is being spent in meetings : 50% of the time in meetings Who are they interacting with (internal/external) Internal Will the contractor have access to any customer data? NO MUST-HAVE Hard Skills:1.) Info Sec 5yrs2.) Archer3.) ServiceNow4.) Risk assessments5.) Risk technology Framework 6.) 1B line of defense SOFT SKILLS:1.) time management 2.)work independentlyNICE-TO-HAVE 1.) CISSP \ CISM or similar industry certification/training DISQUALIFIERS - is there any information/experience on a candidate's resume that would disqualify them from consideration for this position? 1.) N\A TIMELINES/IMPORTANT DATES:Upcoming PTO: Supplier Call: Supplier July 13th 10:30amDistribute Requisition: July 16th Halting: July 20th Shortlist De-Brief: 24hrTarget interview: July 22nd onward Interview process: 2 rounds Virtual Interview de-brief: As completed Enable Skills-Based Hiring No $(function(){ $(".qualPlaceHolder").each(function(){ if($(this).parents('#jsLegend').length != 1 || $(this).find('ul').length == 0) { var requested = $(this).attr("requested"); var presented = $(this).attr("presented"); var dynamicId = $(this).attr("id"); var text = $(this).attr("text"); var readOnly = ($(this).attr("edit") === 'true'); var flexibleScaleLevels = $(this).attr("flexibleScaleLevels"); var flexibleScaleLevelNames = $(this).attr("flexibleScaleLevelNames"); new FG.Qual({ element: $(this), readOnly: readOnly, requested: requested, presented : presented, dynamicId : dynamicId, text : text, flexibleScaleLevels : flexibleScaleLevels, flexibleScaleLevelNames : flexibleScaleLevelNames, }).initialize(); } })});QualificationAssessmentMust HaveShort-listing QuestionsHas this candidate worked at TD in any capacity?NoIT governance experience in information security and controls risk frameworks5 yearsSkillsArcher Tool3 yearsconducting risk assessments5 yearsExperience challenging 1B Third Party Risk Activities3 yearsExperience with Service Now3 yearsInformation Security Specialist experience5 yearsNice to HaveSkillsCISSP and/or CISM accreditationYes Contractor Engagement Type RecruitedWill this contractor be expected to work onsite, remote or hybrid? Onsite | |