Risk Analyst - 2LoD Controls Testing and Oversight

Governance & Control Analyst III

The Governance & Control Analyst III provides specialized business governance and control guidance and support for a business or functional area and implements policies/processes and/or initiatives to meet business governance and control objectives. May provide complex reporting, analysis, testing and assessments at the functional or enterprise level and is generally a lead or SME for a given area/function.

Department Overview:

TD Bank is guided by the Three Lines of Defense (LOD) Risk Framework: Risk Ownership (1LOD), Risk Oversight (2LOD), and Internal Audit (3LOD). The second line is independent of the business and provides policies, standards, and methodologies, with authority to assess and challenge the first line's adherence to those expectations. In this role, you will support the scoping and execution of independent 2LOD controls testing across business processes and technology platforms, and contribute to regulatory and internal risk reporting.

Depth & Scope:

• Experienced working professional role providing specialized services, advisory or processes/program support within their own area of specialty
• Requires business experience, conceptual and practical knowledge of own specialty and knowledge of broader related areas
• Accountable for own work and acts as an escalation point or knowledge resource for others
• Leads projects or work streams within broader projects with moderate risk and may be accountable for managing ongoing activities, processes and functional programs
• Works within broad guidelines/policies and independently performs tasks from end-to-end
• Solves moderately complex problems by taking a new perspective on existing solutions
• Exercises judgment based on the analysis of multiple sources of information
• Conveys business context when providing guidance within field of specialty to internal or external stakeholders
• Identifies and leads problem resolution

Education & Experience:

• Undergraduate degree preferred
• Broad knowledge of business and risk and control environment
• 4+ years of relevant experience
• Solid knowledge of governance, risk and control procedures, strategies & tactics
• Knowledge of current and emerging trends
• Skill in using analytical software tools, data analysis methods and reporting techniques
• Skill in using computer applications including MS Office
• Ability to communicate effectively in both oral and written form
• Ability to work collaboratively and build relationships
• Ability to work successfully as a member of a team and independently
• Ability to exercise sound judgement in making decisions
• Ability to analyze, research, organize and prioritize work while meeting multiple deadlines
• Ability to process and handle confidential information with discretion

Additional Responsibilities:

• Execute independent 2LOD testing of business and technology controls, including test planning, fieldwork, and documentation
• Execute independent testing in the following areas: Control Design & Operating Effectiveness, Transactions Testing, Data Reconciliations, Logic Reperformance, Data Profiling/Analytics, End-User Computing (EUC) Review, Policy & Procedure Review, Governance/Oversight, and Regulatory Rule Compliance
• Identify opportunities to streamline and automate controls testing (where appropriate), including through the use of generative AI, agentic AI, and RPI
• Support maintenance of the testing inventory and update the testing universe and test plans based on regulatory developments and changes in the internal risk profile
• Partner with business and technology stakeholders to discuss key controls, potential control gaps, root causes, and remediation plans
• Assess processes and controls end-to-end and connect themes across issues to drive standardization of solutions, processes, and control design
• Monitor emerging risk and regulatory trends, identify issues and opportunities, and recommend actions to management
• Manage deliverables proactively and provide clear, timely status updates, risks, and dependencies to management
• Perform ongoing risk analysis, escalate concerns appropriately, and support concise reporting for internal governance and regulatory needs

Job Requirements/Preferred Experience:

• Bachelor's degree required; advanced degree and/or relevant certifications (e.g., CRISC, CISA, CIA, CPA, FRM, CFA) a plus
• 2+ years of experience in operational risk, risk management, internal audit, compliance testing, or related roles within financial services
• Experience using Microsoft Copilot and other approved generative and agentic AI tools to automate and improve tasks and processes
• Knowledge of financial services industry products and related reporting is a plus
• Business Banking experience is an asset
• Ability to interpret guidelines, standards, policies, and analysis results to inform decisions and provide effective challenge at senior levels
• Ability to work with large datasets and apply data analytics to support testing, insights, and reporting
• Strong attention to detail and a demonstrated ability to identify root causes behind issues and observations
• Strong analytical, problem-solving, and organizational skills
• Confidence to challenge the status quo and navigate difficult conversations with professionalism and tact
• Strong written and verbal communication skills, with the ability to build and maintain effective working relationships across functions

Customer Accountabilities:

• Provides specialized business governance and control related advice/support to management/leadership and respective teams for area(s) of specialization
• Leads on the implementation of governance and control initiatives in support of the overall business/function strategy
• Manages a set of business governance and control work activities requiring coordination across multiple areas
• Reviews processes and controls and connects the dots across issues and control deficiencies in order to increase standardization of solutions, processes and controls
• Supports/manages the integrated implementation of policies/processes/procedures/changes across multiple functional areas
• Provides subject matter expertise to projects/initiatives, and participates in identifying, designing and testing solutions and supporting implementation activities

Shareholder Accountabilities:

• Ensures programs/policies/practices are well-managed, meet business needs/priorities, and comply with internal/external requirements
• Exercises discretion in managing communication/correspondence, information and all matters of confidentiality
• Conducts research projects; supports the development/delivery of materials and presentations to management or broader audience
• Adheres to enterprise frameworks or methodologies that relate to activities for own business area
• May lead work streams by acting as a project lead/SME for medium-scale projects/initiatives in accordance with project management methodologies
• Protects the interests of the organization – identifies and manages risks, and escalates non-standard, high-risk transactions/activities as necessary
• Maintains a culture of risk management and control, supported by effective processes in alignment with risk appetite
• Is knowledgeable of and complies with Bank Code of Conduct

Employee/Team Accountabilities:

• Participates as a member of the team, supports a positive work environment and ensures timely communication
• Supports team by regularly enhancing knowledge/expertise in own area and participates in knowledge transfer
• Keeps current on emerging trends/developments and grows knowledge of the business, related tools and techniques
• Keeps others informed about the status/progress of projects
• Contributes to team development of skills and capabilities through mentorship of others, by sharing knowledge and experiences and leveraging best practices
• Contributes to a fair, positive and equitable environment
• Acts as a brand ambassador for your business area/function and the Bank

Physical Requirements:

Never: 0%; Occasional: 1-33%; Frequent: 34-66%; Continuous: 67-100%

• Domestic Travel – Occasional
• International Travel – Never
• Performing sedentary work – Continuous
• Performing multiple tasks – Continuous
• Operating standard office equipment - Continuous
• Responding quickly to sounds – Occasional
• Sitting – Continuous
• Standing – Occasional