We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients.
At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute.
To learn more about CIBC, please visit CIBC.com
What you’ll be doing
As a Senior Consultant, Supplier Risk Management (Cyber) you will be responsible for conducting Third Party due diligence assessments to identify potential risks to help our technology and business stakeholders meet security goals and objectives. You will be reviewing independent assurance reports to identify potential risks to help our stakeholders meet CIBC's security goals and objectives. Utilizing your relationship building skills, you will partner with line of business, Third Party suppliers, technology teams and help them proactively identify potential risks and present recommendations that are practical and achievable. You will be involved in the intake, assessment and reporting activities in the Centre of Excellence and will ensure your assessment of Third-party risk to CIBC is well documented and communicated to management.
At CIBC we enable the work environment most optimal for you to thrive in your role. You’ll have the flexibility to manage your work activities within a hybrid work arrangement where you’ll spend 1-3 days per week on-site, while other days will be remote
How You’ll Succeed
• Advisory/Assessment Services – Conduct ongoing Third Party due diligence, including the review of independent assurance reports to help determine the potential information security risk to CIBC. Assess business needs against potential risks and provide your recommendations to enhance our information security landscape.
• Delivery and Execution - You will scrutinize Supplier independent-assurance reports and help develop Supplier risk profiles through concise documentation. You will help us execute detailed Information Security risk assessments for key Third Party suppliers, conduct ongoing monitoring of these suppliers and provide detailed reporting/analytics. Provide direction and remediation directions to Third Parties and business partners. Maintain and manage third-party risk database to ensure proper risk management and proper awareness.
• Communication - Build and present documentation to executive management aimed at communicating potential risks and providing recommendations. Provide feedback to and participate in the design and implementation of security assessment processes across the organization. Research, design, and implement security monitoring practices and operationalize these processes across the group.
Who You Are
• You can demonstrate experience in Information Security, Threat-risk assessments, Vulnerability & Penetration testing, and application security development projects . Experience in the the Financial Services industry is preferred but not necessary.
• Experience with independent assurance engagements such as AICPA SOC 2, ISO:27001, PCI-DSS is an asset. Experience in Cloud Computing technologies, Exposure to Agile Development processes, and a CISSP certification is an asset.
• You're passionate about people. You find meaning in relationships, and surround yourself with a diverse network of partners. You build trust through respect and authenticity.
• You're proactive. You're a self-starter and take initiative to identify areas of improvement. You're eager to share your opinions and propose solutions to challenges.
• You're digitally savvy. You seek out innovative solutions and embrace evolving technologies. You can easily adapt to new tools and trends.
• Your influence makes an impact. You know that relationships and networks are essential to success. You inspire outcomes by making yourself heard.
• You give meaning to data. You enjoy investigating complex problems, and making sense of information. You're confident in your ability to communicate detailed information in an impactful way.
• Values matter to you. You bring your real self to work and you live our values – trust, teamwork and accountability.
Prior to starting in this role, security checks, including a criminal record check must be successfully completed to the satisfaction of CIBC. An annual criminal record check may also be required.
What CIBC Offers
At CIBC, your goals are a priority. We start with your strengths and ambitions as an employee and strive to create opportunities to tap into your potential.
We work to recognize you in meaningful, personalized ways including a competitive compensation, a banking benefit*, wellbeing support and additional offers such as employee and family assistance programs and MomentMakers, our social, points-based recognition program.
Our spaces and technological toolkit will make it simple to bring together great minds to create innovative solutions that make a difference for our clients.
*Subject to program terms and conditions
What you need to know
CIBC is committed to creating an inclusive environment where all team members and clients feel like they belong. We seek applicants with a wide range of abilities and we provide an accessible candidate experience. If you need accommodation, please contact Mailbox.careers-carrieres@cibc.com
You need to be legally eligible to work at the location(s) specified above and, where applicable, must have a valid work or study permit
Expected End Date
2024-05-31
Job Location
Toronto-81 Bay, 19th Floor
Employment Type
Regular
Weekly Hours
37.5
Skills
Cybersecurity, Risk Management, Third Party Risk Management, Vendor Risk Management, Vulnerability Management
