CIBC

Financial Services

Sr.Consultant,InformationSecurity

CA$125–175k ~AI est. Toronto, Ontario, Canada FULL TIME Remote Friendly
Market Sentiment
HIGH DEMAND

Neural analysis suggests this role is
optimal for Senior candidates.

The Brief

“Sr. Consultant, Information Security at CIBC. Skills: Information Security, Risk Management, Cybersecurity, Threat Modeling. Assess projects for security risks. Present recommendations”

Industry & Context.

Financial Services
Problems you'll solve

Investigating complex problems; Making sense of information; Communicating detailed findings

What They're Looking For.

Must Have

8-12 years Information Security Risk Management, 8-12 years Threat-risk assessments, 8-12 years Vulnerability & Penetration testing, 8-12 years Threat modelling, Familiarity with emerging technologies, Familiarity with cloud computing platforms, Exposure to agile development processes, Bachelor's degree in Cybersecurity, Bachelor's degree in Computer Science, Bachelor's degree in Information Security, Bachelor's degree in Engineering, Bachelor's degree in Information Systems, Master's degree in Cybersecurity, Master's degree in Computer Science, Master's degree in Information Security, Master's degree in Engineering, Master's degree in Information Systems, Legally eligible to work

Nice to Have

Pursuing security certification, CISSP certification, CISM certification, CISA certification

What You'll Do.

Assess projects for security risks

Present recommendations

Provide insight and support

Assemble policies and procedures

Partner with business lines

Partner with technology teams

Partner with ecosystem participants

Provide guidance on cybersecurity risks

Provide support on cybersecurity risks

Identify risks associated with data sharing

Identify risks associated with API integrations

Identify risks associated with authentication

Identify risks associated with consent flows

Present practical recommendations

Present achievable recommendations

Review requirements documentation

Review architecture diagrams

Review solution designs

Determine feasibility of projects

Determine security risk of projects

Conduct threat modeling

Provide actionable security recommendations

Provide advisory support to stakeholders

Lead cybersecurity risk assessments

Execute detailed threat risk assessments

Coordinate penetration testing

Assess consumer consent mechanisms

Assess identity and authentication flows

Assess central registry infrastructure

Support accreditation of third-party participants

Support security evaluation of third-party participants

Support accreditation of vendors

Support security evaluation of vendors

Recommend new controls

Develop learning materials

Deliver learning materials

Develop training materials

Deliver training materials

Provide feedback on security assessment processes

Identify opportunities to enhance security processes

Identify opportunities to enhance security tools

Identify opportunities to enhance security frameworks

Recommend improvements

Implement improvements

Share expertise across teams

Share insights across teams

Mentor junior advisory members

Contribute to cross-functional initiatives

Build organizational awareness of cybersecurity risks

Build organizational awareness of cybersecurity solutions

How You'll Work.

Team & Collaboration

Partner with business lines; Partner with technology teams; Partner with ecosystem participants; Cross-functional initiatives; Share expertise across teams; Share insights across teams

Communication Scope

Present risk reports; Translate technical risks; Deliver training materials; Stakeholder engagement

Process & Methodology

Agile development processes

Full Job Description

We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients. At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute. To learn more about CIBC, please visit [CIBC.com](https://www.cibc.com/en/about-cibc.html) **What you 'll be doing** You’ll be joining CIBC’s Cyber and Third Party Risk Team. You’ll be on the front lines of building the future of information security at CIBC. As a Sr. Consultant, Information Security, you’ll assess projects for security risks and present recommendations that allow the business to make informed conclusions. You’ll provide insight and support to assemble policies and procedures that safeguard our clients, enhance risk management, and enable our success. _At CIBC we enable the work environment most _ _optimal for you to thrive in your role. _ _You’ll have the flexibility to manage your work activities within a hybrid work arrangement where you’ll spend 1-3 days per week on-site, while other days will be remote._ **How you 'll succeed** * **Build and Maintain Relationships -** You will partner with business lines, technology teams, and ecosystem participants to provide guidance and support on cybersecurity risks and current trends within Open Banking and financial data ecosystems. Leveraging your relationship-building skills, you will proactively identify risks associated with data sharing, API integrations, authentication, and consent flows, presenting practical and achievable recommendations. Your passion for information security and risk advisory services will help you establish trust and credibility as a strategic advisor across the organization. * **Consulting -** You will review and interpret requirements documentation, architecture diagrams, and solution designs to determin

Free ATS check

Applying for this Sr. Consultant, Information Security role?

Most applicants get filtered before a human reads their resume. See if yours makes the cut.

How to Apply on Workday

  • Workday has a multi-step form — save your progress after every section.
  • "Apply With LinkedIn" can fail or lose data; manual entry is more reliable.
  • Watch for the "Submit for Review" final step — hitting "Save" alone does not submit.
  • Job requisition numbers are useful when following up with HR by email.

ANONYMOUS · UNFILTERED

What do employees actually say about CIBC?

Real rants from real employees. Read before you apply.

Read Company Rants →