• 
  Enable cyber threat identification by proactively and continuously monitoring the internal and external landscape for relevant events, risks and threats.

• Lead regional geopolitical threat analysis to assess emerging physical, cyber and other threats.

• Use OSINT research and tooling to investigate top priority threats; applying deep knowledge of the MITRE ATT&CK framework and threat actor tradecraft.

• Partner with Threat Management teams to understand events and support technical threat analysis of malicious cyber security incidents.

• Identify and assess threats to supply chain by partnering effectively with Vendor Management in managing risk to TD, support response activities for supply chain incidents and pro-actively identifying emerging threats to supply chain.

• Effectively author and review intelligence products and communications for stakeholders, operational personnel, and leadership.

• Support cyber fraud intelligence capabilities by identifying and mitigating methods for account compromise and fraud.

• Provide expertise and consultation to partners and/or stakeholders on a broad range of threats and emerging threats relevant to TD, its supply chain and the financial sector.

• Proactively review internal processes and activities and identify opportunities for improvement.

• Influence behavior to reduce risk and foster a strong technology risk management culture throughout the enterprise.

• Develop and deliver threat briefings.

Depth & Scope:

• Advanced knowledge of Bank, technology standards and managing people / projects

• Leads a small team of IT professionals; coaches/ educates, monitors and manages team members

• Strong communication, negotiation and organizational skills specifically including the ability to present options in business terms to both IT and business staff including executives

Education & Experience:

• Bachelor's degree preferred

• Information security certification / accreditation an asset

• 7+ years of relevant experience

Preferred Qualifications :

• 7+ years experience in intelligence collection and production

• 5+ years experience supporting international (follow-the-sun) operations

• Experience and familiarity using common intelligence processes and tools, including a threat intelligence platform.

• Proven superior oral and written communication skills and ability to translate complicated threat actor behavior to an executive audience.

• Demonstrated tradecraft in open-source collection.

• Excellent time management skills, including the ability to perform to a production calendar.

• Demonstrated ability to lead shift handovers and transitions.

• Demonstrated ability to stay abreast of emerging threat actor TTP’s.

• Advanced ability to apply real world geopolitical indicators to predict threat actor behavior.

• Demonstrated knowledge of the current threat landscape, banking and technology standards and regulatory requirements.