Senior Consultant, Exposure Platform

CIBC•Toronto, ON

1d•Hybrid

About The Position

As a Senior Information Security Consultant on the Exposure Platforms team, you will play a key hands-on role in maintaining and advancing CIBC's exposure management ecosystem. You will focus on ensuring the reliability, integrity, and operational health of exposure management tools, data pipelines, and application-layer integrations that power the Cyber Threat Exposure Management (CTEM) program. Working closely with cross-functional teams, you will help strengthen the accuracy and actionability of exposure signals, troubleshoot and resolve technical challenges, and actively contribute to the evolution of exposure management capabilities at CIBC. At CIBC we enable the work environment most optimal for you to thrive in your role. You'll have the flexibility to manage your work activities within a hybrid work arrangement where you'll spend 1-3 days per week on-site, while other days will be remote.

Requirements

5 or more years of hands-on experience in platform operations, security operations, or a closely related technical field.
Strong working knowledge of exposure management platforms, vulnerability scanning technologies, authentication mechanisms, integration patterns, and data ingestion pipelines.
Comfortable operating independently in complex technical environments with a track record of keeping enterprise platforms reliable and well-governed.
Moderate networking and telecom skills, including a working understanding of networking protocols, telecommunications infrastructure, and network architecture.
At least 5 years of experience in AI and automation, including scripting or programming in Python or similar languages.
Practical experience with AI and automation platforms such as Power Automate, Copilot Studio, or equivalent tools.
Strong understanding of AI and machine learning concepts and ability to apply AI-powered tools to improve platform capabilities, accelerate analysis, and build more efficient operational processes within a security context.
Strong collaboration skills and ability to build effective working relationships across teams and domains.
Ability to communicate technical findings clearly to engineers, security analysts, and business stakeholders.
Ability to turn complex data into clear, actionable insights.
Current accreditation and good standing in recognized security certifications (CISSP, CISM, or equivalent designation is an asset).

Nice To Haves

Hold a CISSP, CISM, or equivalent designation.

Responsibilities

Platform Health & Operational Support: Proactively keep exposure management platforms running reliably, including maintaining scanning coverage, ensuring authentication stability, and supporting seamless data ingestion across environments. Investigate and resolve application-level issues, close coverage gaps, and address integration weaknesses.
Scanning Coverage & Discovery: Build and maintain integrations across asset, identity, cloud, and network data sources. Implement and refine discovery approaches (agent-based, network-based, hybrid scanning models) to maximize coverage effectiveness.
Data Quality & Reliability: Own the accuracy and consistency of exposure data. Investigate data anomalies, eliminate duplication, and close blind spots. Surface and escalate data quality issues that could affect risk decisions.
Technical Collaboration & Enablement: Work closely with security, cloud, technology, and risk teams to align platform activities with CTEM program goals. Contribute technical depth to discussions, platform roadmap planning, and translate strategic objectives into executable solutions.
Continuous Improvement: Identify opportunities to improve platform performance, operational processes, and data reliability. Contribute ideas and technical input to roadmap and strategy discussions.