Insider Risk Rules

Overview Line Of Business Analytics, Insights, & Artificial Intelligence Work Location : Toronto, Ontario, Canada Hours : 37.5 Pay Details : $96,900 - $136,800 CAD This role is eligible for a discretionary variable compensation award that considers business and individual performance. TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate\'s skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs. As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role. Job Description Role Overview Responsibilities Responsibilities The Insider Risk Rules & Reporting Developer is a manager-level position as a hands-on individual contributor responsible for designing, developing, testing, and maintaining insider risk detection rules and analytic scenarios focused on: Internal fraud against customers (e.g., account takeover facilitation, unauthorized access, data misuse) Internal fraud against the bank (e.g., misappropriation, manipulation of systems, policy circumvention) This role sits within the Insider Threat Management function and partners closely with Fraud, AML, Cybersecurity, HR, Legal, Compliance, and Technology teams. While carrying a managerial title, the role does not have direct people management responsibilities and instead serves as a subject matter expert and technical leader in insider risk detection. Key Responsibilities Insider Risk Rule & Scenario Development : Design, develop, and enhance rule-based and hybrid detection scenarios to identify insider fraud and misconduct. Translate internal fraud typologies, regulatory expectations, and emerging threat intelligence into actionable detection logic. Develop rules covering: Unauthorized customer data access Account manipulation or transaction facilitation Policy override abuse Privileged access misuse Collusion between employees and external actors Data exfiltration and customer information misuse Define thresholds, lookback periods, peer group comparisons, and risk scoring logic Optimize rules to balance detection effectiveness and false positive reduction Perform rule tuning based on alert outcomes, investigations feedback, and control testing results Analytics & Data Engineering Support : Identify and document data requirements across systems such as core banking platforms, CRM and customer servicing tools, employee access logs, HR and role-based access data, case management and alerting systems Partner with data engineering teams to validate data quality, lineage, and completeness Perform exploratory data analysis to identify new insider risk indicators Leverage SQL, Python, or analytics platforms to test hypotheses and validate detection logic Reporting & Metrics Development : Develop risk and performance reporting for insider risk detection, including alert volumes and trends, rule effectiveness metrics, false positive and escalation rates, KRIs Produce executive-level dashboards and regulatory-ready reports Support periodic reporting for governance forums, audits, and regulatory exams Governance, Validation & Documentation : Maintain comprehensive documentation for all detection rules, including business rationale and risk linkage, rule logic and data sources, known limitations and assumptions Support model/rule validation, internal audit reviews, and regulatory inquiries Participate in annual risk assessments and control testing activities Ensure alignment with privacy, labor, and employee monitoring requirements Who We Are TD is one of the world\'s leading global financial institutions and is the fifth largest bank in North America by branches/stores. Every day, we deliver legendary customer experiences to over 27 million households and businesses in Canada, the United States and around the world. More than 95,000 TD colleagues bring their skills, talent, and creativity to the Bank, those we serve, and the economies we support. We are guided by our vision to Be the Better Bank and our purpose to enrich the lives of our customers, communities and colleagues. TD is deeply committed to being a leader in customer experience, that is why we believe that all colleagues, no matter where they work, are customer facing. As we build our business and deliver on our strategy, we are innovating to enhance the customer experience and build capabilities to shape the future of banking. Whether you\'ve got years of banking experience or are just starting your career in financial services, we can help you realize your potential. Through regular leadership and development conversations to mentorship and training programs, we\'re here to support you towards your goals. As an organization, we keep growing – and so will you. Total Rewards & Additional Information Our Total Rewards Package includes a base salary, variable compensation, and health and well-being benefits, savings and retirement programs, paid time off, banking benefits and discounts, career development, and recognition programs. Learn more. Additional Information : We\'re delighted that you\'re considering building a career with TD. This job opportunity is subject to provincial regulation for employment purposes. Each province or territory within Canada may have its own regulations. Colleague Development : Regular career development and performance conversations with your manager, access to an online learning platform, and mentoring programs to help you unlock future opportunities. Training & Onboarding : Training and onboarding sessions to ensure you\'ve got everything you need to succeed in your new role. Interview Process : We\'ll reach out to candidates of interest to schedule an interview and aim to communicate outcomes by email or phone. Accommodation : We value accessibility. Please let us know if you would like accommodations to help you participate in the interview process. We look forward to hearing from you Language Requirement (Quebec Only) : Sans Objet #J-18808-Ljbffr