Security Service Manager

CIBC; Toronto; Hybrid; CAD 110,000 - 160,000; Full time

Job summary

CIBC is seeking a Security Service Manager to lead and optimize DLP and CASB-enabled security services. The role focuses on governance, continuous improvement of security controls, and collaboration with technology and business groups to protect client data and services.

The position requires experience in information security management, strong analytical storytelling, and the ability to drive changes across teams in a hybrid work environment.

Qualifications

• Experience in information and cyber security management with focus on DLP & CASB.
• Governance or management of key security controls.
• Relevant certifications such as CISSP, GCIH, GMON are a plus.
• Minimum 3 years of experience in information security.

Responsibilities

• Maintain and enhance DLP & CASB program governance.
• Monitor service health and drive measurable improvements.
• Collaborate with internal stakeholders and senior management.
• Lead cross-functional security service projects.

Skills

DLP & CASB

Governance

Cyber security

CISSP/GCIH/GMON

Job description

We're building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what's right for our clients.

At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute.

To learn more about CIBC, please visit CIBC.com

What you'll be doing

As a Security Service Manager in the Cybersecurity service management team, you will work with Sr. Service Manager(s) and other internal teams to build or maintain requirements for your security services and ensure that current technology and processes are meeting those requirements. You will build and sustain a robust service health monitoring process. Working with Sr. Service Manager(s), you will carry out continuous monitoring of service health as well as service governance. where necessary you will assist Sr. Service Manager(s) in execution of projects designed to carry out measured improvements in services under your care. this might involve building new processes or changing current process to close the gaps in service or adoption of new technology. You will be expected to maintain knowledge of emerging trends and technology in your service areas. You will also work collaboratively work with other service managers in the overall Security Service Management team to ensure that your services account for changes in other related services and similarly you keep others informed about your planned changes. Cybersecurity Service Management team has many exciting initiatives in progress currently. If things like DLP, CASBand Zero Trust excite you and you like working as a part of collaborative team, then we would love to talk to you and see if we can convince you to be part of our team.

At CIBC we enable the work environment most optimal for you to thrive in your role. You'll have the flexibility to manage your work activities within a hybrid work arrangement where you'll spend 1-3 days per week on-site, while other days will be remote

How you'll succeed

• DLP & CASB Programs –Maintain and enhance the program specifically focusing on security service capabilities under guidance of Sr. Service Manager(s). Facilitate input across the organization to ensure everyone's opinion is considered when solutioning for projects on behalf of the enterprise. As a key contributor, execute on DLP & CASB strategy, provide governance and oversight including managing total cost of operations.
• Continuous Improvement –Support continuous improvement of the DLP & CASB capabilities by leading a working group comprised of subject matter experts across the bank. Manage centralized reporting of key processes to ensure their effectiveness, efficiency and compliance with management objectives. Communicate results within Information Security and CIBC on the analysis, interpretation, strategy and execution of projects while also providing solutions for existing and future risks and vulnerabilities in order to assess the security posture of CIBC.
• Relationship building – Build and maintain strong relationships with important internal stakeholders, especially leaders of technology groups whose work is critical to the success of cyber security at CIBC, and business groups that are impacted by cyber security controls. Gain and maintain executive support for the network security program through creation of business cases, delivery of presentations to senior management, etc.
• Consulting –Take on a consultative approach when checking for Information Security control use and work with internal/external stakeholders to monitor threat environment and contribute to adjustments of security service plans. Analyze trends in information security and perform benchmarking against external organizations through participation in external thought forums.

Who you are

• You can demonstrate experience in Information and Cyber security management or related technology disciplines with a key focus on DLP & CASB capabilities. You have practical experience with governance or management of key security controls, strong understanding of cyber security, and strong analytical storytelling skills. It's an asset if you have a CISSP, GCIH, GMON, or similar certification, as well as a minimum of 3 years of experience in information security or related discipline
• You have solution delivery mindset , are a problem solver and thrive in team oriented collaborative environment. You do not hesitate to reach across team boundaries to get things done.
• You put our clients first. You engage with purpose to find the right solutions. You go the extra mile, because it's the right thing to do.
• You know that details matter. You notice things that others don't. Your critical thinking skills help to inform your decision making.
• You embrace and advocate for change. You continuously evolve your thinking and the way you work in order to deliver your best.
• You give meaning to data. You enjoy investigating complex problems, and making sense of information. You're confident in your ability to communicate detailed information in an impactful way.
• You look beyond the moment. You make decisions and take actions that will make a difference today and tomorrow. You proactively seek new opportunities to define what's possible and what can be improved.
• Values matter to you. You bring your real self to work and you live our values - trust, teamwork, and accountability.

What CIBC Offers

At CIBC, your goals are a priority. We start with your strengths and ambitions as an employee and strive to create opportunities to tap into your potential. We aspire to give you a career, rather than just a paycheck.

• We work to recognize you in meaningful, personalized ways including a competitive salary, incentive pay, banking benefits, a benefits program*, defined benefit pension plan*, an employee share purchase plan, a vacation offering, wellbeing support, and MomentMakers, our social, points-based recognition program.

• Our spaces and technological toolkit will make it simple to bring together great minds to create innovative solutions that make a difference for our clients.

• We cultivate a culture where you can express your ambition through initiatives like Purpose Day; a paid day off dedicated for you to use to invest in your growth and development.

*Subject to plan and program terms and conditions

What you need to know

• CIBC is committed to creating an inclusive environment where all team members and clients feel like they belong. We seek applicants with a wide range of abilities and we provide an accessible candidate experience. If you need accommodation, please contact [e-mail]

• CIBC is committed to clarity in our hiring process. All roles posted are opportunities we’re actively recruiting for, unless stated otherwise.

• You need to be legally eligible to work at the location(s) specified above and, where applicable, must have a valid work or study permit.

• We may ask you to complete an attribute-based assessment and other skills test (such as simulation, coding, French proficiency).

• We use artificial intelligence tools during the recruitment process. Our goal for the application process is to get to know more about you, all that you have to offer, and give you the opportunity to learn more about us.

Job Location

Toronto-141 Bay, 16th Floor

Employment Type

Regular

Weekly Hours

37.5

Skills

Communication, Cyber Security Management, Data Loss Prevention (DLP), Regulatory Compliance, Risk Management