Third Party Cyber Risk Assessor

Assess third-party cybersecurity controls at TD in Toronto, using evidence review and risk judgment to support defensible conclusions.As a Third Party Cyber Risk Assessor, you will execute assessments under the 3PCRM methodology. You will evaluate control effectiveness across IAM, vulnerability management, security operations, incident response, data protection, cloud security architecture, and resilience. The work supports BAU, backlog, and remediation-related assessments.Key Responsibilities:
Execute end-to-end third-party cybersecurity risk assessmentsReview SOC reports, policies, certifications, and assurance evidenceChallenge incomplete responses and obtain additional documentationDocument deficiencies, observations, gaps, and evidence-based conclusionsMaintain audit-ready records and manage assessment timelinesRequirements:
Ten or more years of cybersecurity experienceExperience in third-party risk, information security, or IT auditKnowledge of SOC 1, SOC 2, ISO 27001, and NISTStrong analytical judgment and assessment documentation skillsPreferred post-secondary education and CISSP certificationApply cybersecurity controls expertise, evidence analysis, and risk assessment judgment to strengthen third-party oversight at TD.
#J-18808-Ljbffr