Senior Information Security Consultant — Hybrid (Risk & Controls)

CIBC US; Toronto; Hybrid; CAD 110,000 - 140,000; Full time

Benefits offered by this job

Competitive salary

Banking benefits

Defined benefit pension plan

Employee share purchase plan

Wellbeing support

Job summary

CIBC is seeking a Senior Information Security Specialist to consult on risk assessments, security controls, and project security delivery. You will partner with business and technology teams to identify risks and provide practical recommendations, while guiding security assessments before production go-live.

The role supports a hybrid work arrangement with 1–3 days on-site and remaining days remote, and requires experience in information security, threat-risk assessments, and cloud/Agile

Qualifications

• Experience in Information Security and risk assessments.
• Familiarity with vulnerability and penetration testing.
• Exposure to cloud computing and Agile development processes.

Responsibilities

• Consult on security risks and present actionable recommendations to stakeholders.
• Assess projects for security risks using requirements & architecture documents.
• Lead security assessments and coordinate action plans per policy and guidelines.
• Build security into project lifecycles and ensure go-live security readiness.
• Communicate risks to executive management with clear documentation.
• Support implementation of security assessment processes across the organization.

Skills

Information Security

Threat risk assessments

Vulnerability testing

Penetration testing

Application security

Job description

CIBC is seeking a Senior Information Security Specialist to consult on risk assessments, security controls, and project security delivery. You will partner with business and technology teams to identify risks and provide practical recommendations, while guiding security assessments before production go-live.

The role supports a hybrid work arrangement with 1–3 days on-site and remaining days remote, and requires experience in information security, threat-risk assessments, and cloud/Agile