Senior Consultant, Firewall Policy

Canadian Imperial Bank of Commerce; Toronto; On-site; CAD 90,000 - 120,000; Full time

Job summary

A leading bank in Toronto is seeking an experienced information security professional to fortify its network security. You will oversee firewall policy governance and ensure compliance with security standards. Candidates should have over 8 years of experience in managing firewall rules across major platforms and hold relevant certifications. This role offers a competitive salary and encourages personal ambition and development.

Benefits

Competitive salary

Defined benefit pension plan

Employee share purchase plan

Wellbeing support

Qualifications

• 8+ years of experience in managing firewall rules and security policy governance.
• Strong understanding of Azure NSGs, TCP/IP, and packet analysis.
• Relevant security certifications like CISSP or Cisco's CCNA Security are a plus.

Responsibilities

• Lead comprehensive reviews of firewall rules across platforms.
• Identify unused or high-risk firewall rules and drive remediation.
• Develop governance frameworks for policy reviews.

Skills

Analytical Thinking

Risk Management

Information Security

Troubleshooting

Education

Degree or diploma in Computer Science, Engineering, or related field

Tools

Firemon

Palo Alto

Fortinet

Check Point

Cisco

Job description

We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients.

At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute.

To learn more about CIBC, please visit CIBC.com

What You’ll Be Doing

As a key member of CIBC’s Security team, you’ll play a pivotal role in fortifying our network security posture through meticulous firewall policy management, compliance alignment, and operational governance. You’ll lead the review, optimization, and governance of firewall rules across multiple platforms, using tools like Firemon to identify and remediate risk. This role is ideal for a seasoned information security professional with deep firewall expertise and a strong grasp of security governance frameworks like NIST.

At CIBC, we enable a work environment most optimal for you to thrive in your role. Details on your work arrangement (proportion of on-site and remote work) will be discussed during your interview.

How You’ll Succeed

• Firewall Policy Oversight – Lead comprehensive reviews of firewall rules across platforms (Palo Alto, Fortinet, Check Point, Cisco) to ensure alignment with security best practices and organizational standards.
• Risk Identification & Remediation – Use Firemon to analyze rule usage, identify unused or high-risk rules, and drive remediation while minimizing business impact and maintaining system integrity. Stay current with evolving security technologies and frameworks, and continuously seek opportunities to enhance firewall governance and policy optimization.
• Governance Leadership & Compliance Management – Develop and enforce governance frameworks for policy reviews, including setting review cycles, approval processes, and documentation protocols to ensure continuous improvement and compliance. Align firewall configurations with NIST security standards and regulatory frameworks, ensuring policies are auditable, traceable, and compliant.
• Stakeholder Collaboration – Partner with network, application, infrastructure, and security teams to validate changes and ensure smooth implementation of firewall policies across environments.
• Reporting & Documentation – Deliver clear, actionable reports and maintain detailed documentation of policy changes, review outcomes, and compliance metrics to support security transparency and accountability.

Who You Are

• You can demonstrate 8+ years of experience. in managing firewall rules and security policy governance across major platforms, including Palo Alto, Fortinet, Check Point, and Cisco. You possess a strong conceptual understanding of Azure NSG’s, TCP/IP, packet analysis, routing technologies, and troubleshooting through network captures. Experience with Azure and Palo Alto services is considered a strong asset. You’re well-versed in security infrastructure and controls for regulated environments and have worked within compliance frameworks such as NIST, ensuring end-to-end adherence. It’s an asset if you have relevant security certifications such as CISSP, Cisco's CCNA Security, Fortinet's NSE certifications, Palo Alto Networks certifications, and Checkpoint Security certifications. A degree or diploma in Computer Science, Engineering, or a related field supports your foundational expertise.
• You're driven by collective success. You know that collaboration can transform a good idea into a great one. You understand the power of an inclusive team that enjoys working together to bring a shared vision to life.
• You engage with your heart and mind. You care about people and respect different perspectives. You listen to and learn from the experiences of others. You’re a continuous learner, staying current with segmentation best practices, threat vectors, and enterprise security trends.
• You act like an owner. You thrive when you're empowered to take initiative, go above and beyond, and deliver results.
• You're passionate about people. You find meaning in relationships, and surround yourself with a diverse network of partners. You build trust through respect and authenticity.
• Values matter to you. You bring your real self to work and you live our values – trust, teamwork and accountability.

#LI-TA

What CIBC Offers

At CIBC, your goals are a priority. We start with your strengths and ambitions as an employee and strive to create opportunities to tap into your potential. We aspire to give you a career, rather than just a paycheck.

• We work to recognize you in meaningful, personalized ways including a competitive salary, incentive pay, banking benefits, a benefits program*, defined benefit pension plan*, an employee share purchase plan, a vacation offering, wellbeing support, and MomentMakers, our social, points-based recognition program.

• Our spaces and technological toolkit will make it simple to bring together great minds to create innovative solutions that make a difference for our clients.

• We cultivate a culture where you can express your ambition through initiatives like Purpose Day; a paid day off dedicated for you to use to invest in your growth and development.

*Subject to plan and program terms and conditions

What you need to know

• CIBC is committed to creating an inclusive environment where all team members and clients feel like they belong. We seek applicants with a wide range of abilities and we provide an accessible candidate experience. If you need accommodation, please contact [e-mail]

• You need to be legally eligible to work at the location(s) specified above and, where applicable, must have a valid work or study permit.

• We may ask you to complete an attribute-based assessment and other skills tests (such as simulation, coding, French proficiency, MS Office). Our goal for the application process is to get to know more about you, all that you have to offer, and give you the opportunity to learn more about us.

Job Location

Toronto-81 Bay, 32nd Floor

Employment Type

Regular

Weekly Hours

37.5

Skills

Analytical Thinking, Group Problem Solving, Information Security, Information Technology (IT), Risk Management, Stakeholder Management, Testing Methodology, Troubleshooting