Tech Audit Lead - Hybrid (IT Risk & Security)

Canadian Imperial Bank of Commerce; Toronto; Hybrid; CAD 90,000 - 120,000; Full time

Benefits offered by this job

Competitive salary

Health benefits

Pension plan

Employee share purchase plan

Vacation offering

Wellbeing support

Job summary

Canadian Imperial Bank of Commerce (CIBC) is seeking a technology audit professional to contribute to the audit plan and lead assessments of IT infrastructure, security, and operational resilience. The role requires 2–4 years of relevant audit experience and professional certifications such as CISA or CISSP.

A hybrid work arrangement is offered with on-site and remote days. You will provide leadership, document work according to Internal Audit standards, and engage with stakeholders to ensure

Qualifications

• 2–4 years of technology audit experience with broad knowledge of IT risk and controls.
• Ability to write concise reports used by senior leadership.
• Current accreditations in CISA, CISSP or related frameworks (COBIT/ISO/NIST).

Responsibilities

• Develop and contribute to the annual Audit Plan for Technology Operations, Security and Resilience.
• Execute and manage technology audits with high-quality results within budgets and plans.
• Communicate risk trends and control issues to Internal Audit management and senior leadership.

Skills

Technology audit experience

IT risk understanding

Regulatory requirements

Education

CISA certification

CISSP certification

COBIT knowledge

ITIL knowledge

ISO/NIST frameworks

Tools

Cloud services

Access controls

Job description

Canadian Imperial Bank of Commerce (CIBC) is seeking a technology audit professional to contribute to the audit plan and lead assessments of IT infrastructure, security, and operational resilience. The role requires 2–4 years of relevant audit experience and professional certifications such as CISA or CISSP.

A hybrid work arrangement is offered with on-site and remote days. You will provide leadership, document work according to Internal Audit standards, and engage with stakeholders to ensure