Sr. Analyst, Information Security

CIBC • Toronto, ON

2d • Hybrid

About The Position

The role is responsible for managing the process of developing and supporting the activities and tools used for validating and ensuring technology based information security using selected third party vendors. The role troubleshoots problems and provides technical training to less experienced employees, acting as the central point of contact between Information Security and Internal Audit. The role uses judgement and autonomy on day to day tasks, managing and leading Information Security internal audit related findings and activities, and resolving identified vulnerabilities. The role facilitates the provision of security risk information from third parties and the communication of information to management. In addition, the role proactively addresses problems within the scope of responsibility and identifies areas for possible improvements. At CIBC we enable the work environment most optimal for you to thrive in your role. You’ll have the flexibility to manage your work activities within a hybrid work arrangement where you’ll spend 1-3 days per week on-site, while other days will be remote.

Requirements

• Experience in PAM with practical experience as an Idira Consultant (formerly CyberArk) in a self-hosted environment.
• Supported CyberArk components, performed troubleshooting, and assisted with upgrades and server maintenance.
• Participate in root cause analysis and document findings, working closely with stakeholders.
• Familiarity with SCM, enterprise change management, cloud technologies, Agile methods, and code promotion is valued.
• Documentation skills in SharePoint and Jira/Confluence are helpful.
• Aware of cybersecurity trends and risks impacting IAM and PAM.
• Good understanding of Idira/CyberArk, IAM, and PAM, and can support and integrate technologies across multiple environments, including Windows, Unix, Linux, Mainframe, Active Directory, and Azure Active Directory.
• Background in engineering or development, with experience in REST APIs, integration, and workflow automation.
• Skills in Python and PowerShell are good to have.
• Contribute to security solutions and support complex application environments.
• Familiar with a variety of technology solutions, focused on CyberArk, IAM, PAM, and related platforms.
• Application support and integration experience is important.
• Can work with REST APIs and automate workflows using Python and PowerShell.
• Passionate about people. Foster relationships, build trust, and collaborate with diverse teams.
• Digitally savvy. Seek out innovative solutions and adapt to new technologies.
• Influence makes an impact. Understand the importance of networking and inspire positive outcomes.
• Give meaning to data. Analyze problems and communicate findings effectively.
• Values matter. Bring authenticity to your work and uphold trust, teamwork, and accountability.

Nice To Haves

• CISSP certification is an asset.

Responsibilities

• Collaborate with senior consultants to implement and support PAM processes for privileged identities.
• Participate in the discovery and assessment of privileged accounts, address user issues, and contribute to technical discussions.
• Provide support for cloud technologies and participate in on-call rotations.
• Assist in implementing security patches, helping to maintain compliance with security standards.
• Apply basic knowledge of processes and tools to support data protection.
• Support project teams and partners in designing and implementing PAM solutions for new and existing infrastructure.
• Ensure compliance with IAM standards and policies, and assist in investigating and remediating security incidents.
• Analyze requirement documents and architecture diagrams, and provide recommendations to improve information system security, guided by senior team members.
• Help evaluate business needs and security concerns.
• Recommend process improvements to streamline workflows and reduce risk.
• Assist in documenting procedures, conducting gap analyses, and maintaining controls and training documentation related to PAM.

Benefits

• competitive salary
• incentive pay
• banking benefits
• a benefits program
• defined benefit pension plan
• an employee share purchase plan
• a vacation offering
• wellbeing support
• MomentMakers, our social, points-based recognition program
• Purpose Day; a paid day off dedicated for you to use to invest in your growth and development

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed