Information Security Co-ordinator Co-op

CIBC•Toronto, ON

2d•Hybrid

About The Position

CIBC’s Cyber Operations & Resilience team is an information security team that protects our bank from cyber threats. As an Information Security Coordinator Co-op in this department, you’ll assist with ensuring that vulnerabilities within CIBC’s environment are being identified, tracked, and remediated, triaging information security alerts, monitoring security events, and investigations for potential security incidents by performing research activities. You will escalate events of interest to senior level investigators when appropriate, and provide assistance where required to the investigations team. Please note, we have multiple positions available under this posting and you may be considered by more than one hiring team.

Requirements

Currently enrolled in post-secondary education and returning to full-time studies.
Details matter, notice things that others don't.
Critical thinking skills help to inform decision making.
Ability to give meaning to data.
Enjoy investigating complex problems and making sense of information.
Communicate detailed information in a meaningful way.
Interest in the various aspects of cyber security and risk.
Currently enrolled in a post-secondary Information Security, Computer Science, Engineering, or a related program.
Enjoy problem solving.
Enjoy being presented with problems or issues and working with a team to find innovative solutions.
Strong organization skills.
Strong time management skills and ability to prioritize competing priorities to ensure successful outcomes.
Values matter to you.
Bring your real self to work and live CIBC values - trust, teamwork, and accountability.
Legally eligible to work at the location(s) specified.
Where applicable, must have a valid work or study permit.

Nice To Haves

Flexibility and ability to adapt to rapidly changing priorities are an asset.

Responsibilities

Assist with ensuring that vulnerabilities within CIBC’s environment are being identified, tracked, and remediated.
Triage information security alerts.
Monitor security events and investigations for potential security incidents by performing research activities.
Escalate events of interest to senior level investigators when appropriate.
Provide assistance where required to the investigations team.
Identify, assess, and prioritize vulnerabilities through the use of various scanning tools, asset management database, and intelligence feeds.
Assess vulnerabilities to determine impact and overall risk.
Engage appropriate remediation teams to close down or mitigate risk.
Build detection content, identify and assess cyber threats through the use of various security tools and intelligence feeds.
Leverage scripting and automation for continuous improvements and enhancements of threat detection capabilities.
Package and communicate risk advisories, reports, and decks to effectively convey the state of newly identified, current, and outstanding vulnerabilities.
Schedule, organize and carry out work assignments and independently adjust work schedules accordingly.