Consultant, Information Security

CIBC; Toronto; Hybrid; CAD 95,000 - 130,000; Full time

Benefits offered by this job

Competitive salary

Incentive pay

Banking benefits

Benefits program

Defined benefit pension plan

Employee share purchase plan

Vacation offering

Wellbeing support

MomentMakers

Job summary

CIBC is seeking an Information Security Consultant to join Risk Management Services. You will conduct security assessments, deliver risk-based recommendations, and support governance initiatives. The role requires strong analytical thinking, collaboration with leadership, and the ability to adapt to evolving technologies.

You’ll thrive in a hybrid work model with 1–3 days onsite in Toronto. A degree in CS/Engineering and security certifications are highly valued.

Qualifications

• 5+ years of experience in Information Security Consulting or similar roles.
• Bachelor's degree or diploma in Computer Science, Engineering, or a related field.
• CISSP/CISM/CIA designation is a plus or asset.

Responsibilities

• Security assessments: perform threat and vulnerability scans; assess initiatives and provide risk-based recommendations.
• Risk reviews: interpret documents and architectures; advise senior leaders on risk and security choices.
• Governance support: contribute to governance initiatives and help develop policies.

Skills

InfoSec

Threat modeling

Risk assessment

Communication

Education

Bachelor's degree in Computer Science or Engineering

Job description

We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients. At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute. To learn more about CIBC, please visit CIBC.com.

What you’ll be doing

You’ll be joining CIBC’s Risk Management Services. You’ll be on the front lines of building the future of information security at CIBC. As an Information Security Consultant, you’ll assess projects for security risks and present recommendations that allow the business to make informed conclusions. You’ll provide insight and support to assemble policies and procedures that safeguard our clients, enhance risk management, and enable our success. At CIBC we enable the work environment most optimal for you to thrive in your role. You’ll have the flexibility to manage your work activities within a hybrid work arrangement where you’ll spend 1-3 days per week on‑site, while other days will be remote.

How you’ll succeed

• Security assessments – Leverage your expertise in Information Security Management to prepare and conduct assessments for both planned initiatives and unplanned instances. Perform clear and thorough threat and vulnerability scans of internal and external devices. Use your knowledge of processes, tools, techniques, and practices for assuring consistency to standards associated with accessing, altering, and protecting organizational data.
• Risk reviews – Examine and interpret requirement documents and architecture diagrams. Collaborate with senior leaders and make informed, risk-based recommendations to enhance information system security. Weigh business needs against security concerns to help guide the business to make practical and informed risk choices.
• Governance support – Proactively contribute to governance initiatives, providing technical and business advice, as well as insight on management processes. Contribute to the development of governance and risk‑related company policies.

Who you are

You can demonstrate 5+ years experience in an Information Security Consultant or a similar role. You know that details matter. You notice things that others don’t. Your critical thinking skills help to inform your decision making. You give meaning to data. You enjoy investigating complex problems and making sense of information. You communicate detailed information in a meaningful way. You’re digitally savvy. You seek out innovative solutions and embrace evolving technologies. You can easily adapt to new tools and trends. You have a degree/diploma in Computer Science, Engineering, or a related field. You’re a certified professional. It’s an asset if you have your CISSP, CIA, or CISM designation. You live your values. You bring high standards, genuine care to your relationships, and want to grow with an employer that shares your values and brings out your best.

What CIBC Offers

We start with your strengths and ambitions as an employee and strive to create opportunities to tap into your potential. We aspire to give you a career, rather than just a paycheck. We work to recognize you in meaningful, personalized ways.

• competitive salary
• incentive pay
• banking benefits
• a benefits program*
• defined benefit pension plan*
• an employee share purchase plan
• a vacation offering
• wellbeing support
• MomentMakers, our social, points‑based recognition program

Our spaces and technological toolkit will make it simple to bring together great minds to create innovative solutions that make a difference for our clients. We cultivate a culture where you can express your ambition through initiatives like Purpose Day; a paid day off dedicated for you to use to invest in your growth and development.

What you need to know

CIBC is committed to creating an inclusive environment where all team members and clients feel like they belong. We seek applicants with a wide range of abilities and we provide an accessible candidate experience. If you need accommodation, please contact [e-mail].

CIBC is committed to clarity in our hiring process. All roles posted are opportunities we’re actively recruiting for, unless stated otherwise. You need to be legally eligible to work at the location(s) specified above and, where applicable, must have a valid work or study permit. We may ask you to complete an attribute‑based assessment and other skills test (such as simulation, coding, French proficiency). We use artificial intelligence tools during the recruitment process. Our goal for the application process is to get to know more about you, all that you have to offer, and give you the opportunity to learn more about us.

Job Location: Toronto-141 Bay, 16th Floor
Employment Type: Regular
Weekly Hours: 37.5

Skills: Analytical Thinking, Cybersecurity, Cybersecurity Controls, Cybersecurity Risk Assessment, Cybersecurity Risk Management, Data Security, Group Problem Solving, Information Security, Information Technology (IT), Risk Management, Security System, Stakeholder Management, Testing Methodology, Troubleshooting

At CIBC, we are in business to help our clients, employees and shareholders achieve what is important to them. Our ability to create value for all CIBC stakeholders is driven by a business culture based on common values: Trust, Teamwork and Accountability. Working with CIBC makes you a part of a work environment committed to our clients, employees and communities - a place where you can excel. Every day, our 48,000 employees help our clients achieve their financial goals, because what matters to our clients, matters to us.