Senior Application Security Program Lead - Hybrid

CIBC; Toronto; Hybrid; CAD 140,000 - 200,000; Full time

Benefits offered by this job

Competitive salary

Incentive pay

Banking benefits

Benefits program

Defined benefit pension

Employee share purchase plan

Vacation offering

Wellbeing support

MomentMakers recognition

Job summary

CIBC in Toronto is seeking a Senior Security Services Manager, Application Security, to lead enterprise-wide security testing capabilities and integrate protection across the development lifecycle.

You will drive strategic governance, oversee SAST/DAST/SCA testing, communicate with executives, and advise cross-functional teams to strengthen the organization's security posture while maintaining a flexible, hybrid work model.

Qualifications

• Experience in Application Security, Vulnerability Management, and data security best practices.
• Certified professional assets such as CISSP/CISA/CISM are advantageous.
• Strong background in both static and dynamic testing methods and security tooling.

Responsibilities

• Strategic Leadership and Governance – shape the Application Security strategy and drive cross-functional projects.
• Security Testing and Assessment – manage SAST, DAST, and SCA services and remediation tracking.
• Communication and Advocacy – prepare executive-level documentation and train development teams.
• Advisory and Relationship Management – guide DevOps teams to embed security in workflows and risk-based prioritization.

Skills

Application Security

Vulnerability Management

SAST

DAST

SCA

Penetration Testing

DevSecOps

Threat & Vulnerability Management

CISSP/CISA/CISM

Job description

CIBC in Toronto is seeking a Senior Security Services Manager, Application Security, to lead enterprise-wide security testing capabilities and integrate protection across the development lifecycle.

You will drive strategic governance, oversee SAST/DAST/SCA testing, communicate with executives, and advise cross-functional teams to strengthen the organization's security posture while maintaining a flexible, hybrid work model.