Post Incident Analyst

Post Incident Analyst

Requirements

• Bachelor’s Degree in Computer Science or related field, or equivalent experience, knowledge, or certification required.
• In-depth understanding of security issues across many different platforms and capability to articulate and communicate these issues to both technical and non-technical audiences.
• Knowledge of ongoing trends of cybersecurity, fraud, and insider threats.
• Strong written and verbal communication skills.
• Strong critical thinking and problem-solving skills.

Responsibilities

• Responsible for supporting facilitation and direction on post incident activities discussions.
• Accountable for the drafting of documented root cause and post incident reports.
• Representing the post incident management team on all meetings with key stakeholders.
• Organizing the rosters of supporting stakeholders.
• Providing support to stakeholders throughout the post incident activities.
• Responsible for adherence to SLOs.
• Partner across teams for retrospective identification of opportunities for improvement to support continuous improvement of TD’s security posture.
• Collaborate with relevant teams to identify appropriate security controls, validations, best practices, and procedural updates to address opportunities for improvement.
• Facilitate audit activities as initiated from internal and external entities, following established policies and procedures.
• Contribute to Playbooks, Operating Models and on-going maintenance of standards and processes.
• Contribute to the development of the company-wide information security requirements, threat modeling, secure design, cryptography standards, third-party component, selection of approved tools, secure implementation, and system monitoring.
• Consult with partners on Technology Controls and Information Security programs, incidents, and controls.
• Support and partner with information security investigations and forensics teams during active incidents.
• Articulate and document impact of control gaps to the business and the overall Bank, risk mitigation and remediation plans, documentation of triage steps or engagement with key stakeholders on resolving overall Bank issues.
• Develop and enhance internal policies and procedures for related incident and event handling capabilities.
• Adhere to and advise on, oversee, monitor, and/or enforce enterprise frameworks and methodologies that relate to information security incident management activities.

Preferred Qualifications

• At least 3 years of experience in a technology focused role (e.g. incident management, incident response, engineering, etc.) preferred.
• SSCP or equivalent preferred.
• Prior experience in the Financial Services industry an asset.