Sr. Security Service Manager, Application Security

Canadian Imperial Bank of Commerce; Toronto; Hybrid; CAD 150,000 - 190,000; Full time

Benefits offered by this job

Competitive salary

Banking benefits

Defined benefit pension plan

Employee share purchase plan

Wellbeing support

MomentMakers recognition program

Hybrid work model

Job summary

Canadian Imperial Bank of Commerce in Toronto seeks a Senior Security Services Manager, Application Security, to advance the enterprise-wide program and strengthen testing across the development lifecycle. You will lead SAST, DAST, and SCA initiatives, partnering with cross-functional teams to integrate security throughout the software stack.

You will guide governance, communicate with executives, and mentor developers on secure practices in a hybrid setup (1–3 days on-site).

Qualifications

• Experience leading application security programs and governance across development lifecycles.
• Experience with SAST/DAST/SCA tooling and security testing metrics.
• Familiarity with security standards and risk-based prioritization for remediation.

Responsibilities

• Lead enterprise-wide application security testing capabilities and governance.
• Communicate security testing value to executives and stakeholders.
• Mentor development teams on secure coding practices and tool usage.

Skills

Application Security

Vulnerability Management

Security Testing

SAST

DAST

SCA

Penetration Testing

Web Application Firewall

Runtime Protection

Mobile Security

Threat & Vulnerability Management

Education

CISSP

CISA

CISM

Tools

SAST

DAST

SCA

Job description

We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients. At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute. To learn more about CIBC, please visit CIBC.com

What you will be doing

As a Senior Security Services Manager, Application Security, you will play a pivotal role in advancing CIBC’s enterprise-wide Application Security program. Your primary focus will be to strengthen application security testing capabilities and to ensure that security and protection are integrated throughout the development lifecycle of all applications and the lifecycle of all data across the enterprise. Your efforts will directly contribute to safeguarding our clients, employees, and the bank, while supporting CIBC’s commitment to a flexible and empowering work environment. At CIBC we enable the work environment most optimal for you to thrive in your role. You will have the flexibility to manage your work activities within a hybrid work arrangement where you will spend 1-3 days per week on-site, while other days will be remote.

How you will succeed

Strategic Leadership and Governance –

You will drive the creation and ongoing refinement of the Application Security strategy, with a particular emphasis on advancing security testing methodologies and tools. This role requires strong cross-functional collaboration to gather requirements, develop business cases and lead projects, including proof of concepts, in the capacity of a product owner. Having a continuous improvement mindset is essential, as you will be responsible for identifying and implementing opportunities to enhance both security testing processes and operational efficiency within the domain.

Security Testing and Assessment –

You will oversee the implementation, management, and continuous improvement of security testing services, such as Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA). You will measure and report on the effectiveness of these activities to ensure comprehensive coverage and timely remediation of identified vulnerabilities. Additionally, you will conduct regular reviews and analysis of testing results, trends, and emerging threats, using these insights to inform and strengthen risk mitigation strategies.

Communication and Advocacy –

You will prepare and delivery clear, compelling documentation and presentations to executive leadership, effectively articulating the value and necessity of security testing initiatives. You will also drive awareness and provide training to application development teams, ensuring they understand the importance and effective use of security testing tools and processes. Your role will include evaluating business needs against current and emerging risks and providing actionable recommendations to strengthen the organization’s security posture.

Advisory and Relationship Management –

You will act as a trusted advisor to application development, operations, and infrastructure teams, guiding them to integrate security testing into their workflows and prioritize remediation efforts based on risk. You will oversee the identification, assessment and management of security risks and design flaws in key applications, offering practical and prioritized solutions. Staying current with the evolving threat landscape and cultivating partnerships with industry peers and vendors will be essential to ensuring CIBC remains at the forefront of application security.

Who You Are

You can demonstrate experience in Application Security, Vulnerability Management, and data security standards and best practices. You bring senior-level experience in application security, such as managing SAST, SCA, DAST, or similar security services. It is considered an asset if you have DevSecOps knowledge and experience. You can demonstrate experience in dynamic and static application security testing, penetration testing, web application firewalls, runtime protection, mobile application security, and broader threat and vulnerability management capabilities. You are a certified professional and it is considered an asset if you hold a CISSP, CISA, or CISM designation in good standing. You are passionate about people. You find meaning in relationships and surround yourself with a diverse network of partners. You connect with others through respect and authenticity. You give meaning to data. You enjoy investigating complex problems and making sense of information. You communicate detailed information in a meaningful way. You know that details matter. You notice things that others do not. Your critical thinking skills help to inform your decision making. You embrace and champion change, continually evolving your approach to deliver your best work. Values matter to you. You bring your real self to work, and you live our values – trust, teamwork, and accountability.

What CIBC Offers

At CIBC, your goals are a priority. We start with your strengths and ambitions as an employee and strive to create opportunities to tap into your potential. We aspire to give you a career, rather than just a paycheck. We work to recognize you in meaningful, personalized ways including a competitive salary, incentive pay, banking benefits, a benefits program*, defined benefit pension plan*, an employee share purchase plan, a vacation offering, wellbeing support, and MomentMakers, our social, points-based recognition program. Our spaces and technological toolkit will make it simple to bring together great minds to create innovative solutions that make a difference for our clients. We cultivate a culture where you can express your ambition through initiatives like Purpose Day; a paid day off dedicated for you to use to invest in your growth and development.

• competitive salary
• incentive pay
• banking benefits
• a benefits program*
• defined benefit pension plan*
• an employee share purchase plan
• a vacation offering
• wellbeing support
• MomentMakers, our social, points-based recognition program

*Subject to plan and program terms and conditions

What you need to know

CIBC is committed to creating an inclusive environment where all team members and clients feel like they belong. We seek applicants with a wide range of abilities and we provide an accessible candidate experience. If you need accommodation, please contact [e-mail] CIBC is committed to clarity in our hiring process. All roles posted are opportunities we’re actively recruiting for, unless stated otherwise. You need to be legally eligible to work at the location(s) specified above and, where applicable, must have a valid work or study permit. We may ask you to complete an attribute-based assessment and other skills test (such as simulation, coding, French proficiency). We use artificial intelligence tools during the recruitment process. Our goal for the application process is to get to know more about you, all that you have to offer, and give you the opportunity to learn more about us.

Job Location Toronto-81 Bay, 18th Floor Employment Type Regular Weekly Hours 37.5 Skills Analytical Thinking, Application Security, Application Security Testing, Collaboration, Communication, Continual Improvement Process, Continuous Improvement, Critical Thinking, Dynamic Application Security Testing (DAST), Group Problem Solving, Information Security, Network Operations, Security Operations, Security Risk Assessment, Security Service, Security Standards, Security Strategy, Security Testing, Static Application Security Testing (SAST), Teamwork, Technical Knowledge, Vulnerability Management At CIBC, we are in business to help our clients, employees and shareholders achieve what is important to them. Our ability to create value for all CIBC stakeholders is driven by a business culture based on common values: Trust, Teamwork and Accountability. Working with CIBC makes you a part of a work environment committed to our clients, employees and communities - a place where you can excel. Every day, our 48,000 employees help our clients achieve their financial goals, because what matters to our clients, matters to us.