Sr. Cyber Risk Consultant

CIBC•Toronto, ON

3d•Hybrid

About The Position

We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients. At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute. You are passionate about information security and risk advisory services and are eager to contribute to our growing Cyber Risk Consulting team. As a Senior Cyber Risk Consultant supporting a designated line of business, you will play an integral role in major projects and strategic initiatives by analyzing business requirements, defining appropriate security controls, guiding control implementation, and evaluating residual risk posture. Your work will enable business and technology teams to make informed, balanced decisions that advance business objectives while maintaining cyber risk at an optimal level. In this capacity, you will develop trusted relationships with project teams and senior leaders, serving as a trusted advisor on cyber risk matters and helping to strengthen cybersecurity practices across your designated line of business. You will collaborate with key partners across the CISO organization to promote compliance with security policies and standards, encourage adoption of cybersecurity services, and support clients in responding to any security incidents. In addition, you will provide regular cyber risk reporting and insights to help monitor and manage the line of business risk posture, identifying strengths, weaknesses, and opportunities for improvement. At CIBC we enable the work environment most optimal for you to thrive in your role you’ll have the flexibility to manage your work activities within a hybrid work arrangement where you’ll spend 1-3 days per week on-site, while other days will be remote.

Requirements

Demonstrate experience in Information Security Risk Management, Threat-risk assessments, Vulnerability & Penetration testing, and application security development projects.
Familiarity with emerging technologies, Cloud Computing technologies, exposure to Agile Development processes, and a security certification such as CISSP, CCSP, CISM, CRISC is an asset.
Passionate about people. You find meaning in relationships, and surround yourself with a diverse network of partners. You build trust through respect and authenticity. You believe in being a team player.
Digitally savvy. You seek out innovative solutions and research / embrace evolving technologies. You can easily adapt to new tools and trends.
Your influence makes an impact. You know that relationships and networks are essential to success. You inspire outcomes by making yourself heard. You possess strong organization, leadership, and team oriented skills. You demonstrate ability to collaborate across team portfolios and clients groups as well as execute on priorities, influence change, and deliver results.
Self-motivated. You work independently and apply professional judgment to effectively diagnose the root cause of problems. You have a well-developed written and oral skills, sufficient to communicate technical, analytical or conceptual information and ideas to the business, senior management and peers.
Give meaning to data. You enjoy investigating complex problems, and making sense of information. A conceptual thinker with proven analytic skill. You're confident in your ability to communicate detailed information in an impactful way.
Values matter to you. You bring your real self to work and you live our values – trust, teamwork and accountability.

Nice To Haves

Familiarity with emerging technologies
Cloud Computing technologies
exposure to Agile Development processes
a security certification such as CISSP, CCSP, CISM, CRISC is an asset.

Responsibilities

Build and maintain Relationships – Develop trusted relationships with business and technology partners by helping them achieve business objectives while managing cyber risk at an appropriate level.
Risk Consulting – Review and interpret requirements documentation, architecture diagrams and solution designs to evaluate security risk to CIBC. Provide practical security recommendations and advisory support to stakeholders throughout the project lifecycle.
Cybersecurity Ambassador – Act as a cybersecurity ambassador by connecting key partners across the CISO organization with the line of business to promote adoption of cybersecurity services and alignment with information security policies and standards.
Management communication – Create and present regular cybersecurity reports with risk insights to business and technology management leaders to support monitoring and management of the line of business risk posture, while identifying strengths, weaknesses, and opportunities for improvement.

Benefits

competitive salary
incentive pay
banking benefits
a benefits program
defined benefit pension plan
an employee share purchase plan
a vacation offering
wellbeing support
MomentMakers, our social, points-based recognition program.
Purpose Day; a paid day off dedicated for you to use to invest in your growth and development.