What you’ll be doing As a member of CIBC’s CTPR team, you’ll play a crucial role in all matters of Information Security. As a Senior Information Security Specialist you will be responsible for consulting on potential risks as well as current trends to help our technology and business stakeholders meet security goals and objectives. Utilizing your communication skills & relationship building skills, you will partner with line of business and technology teams and help identify potential risks and present recommendations that are practical and achievable. You’ll focus on assessing projects for security risks by examining and interpreting requirement documents, architecture diagrams and TRA questionnaire. At CIBC we enable the work workplace most optimal for you to thrive in your role you’ll have the flexibility to manage your work activities within a hybrid work arrangement where you’ll spend 1-3 days per week on-site, while other days will be remote. How you’ll succeed Consulting – Review and interpret requirements documentation, architecture diagrams and solution designs to help determine the feasibility of a project and its security risk to CIBC. Assess business needs against potential risks and provide your recommendations for action plan to enhance our information security landscape. Coordinate action plans and/or risk as outlined in the Control & Deficiency Management Policy and Deficiency Management User Guide. Build Security In the Lifecycle of Projects and complete security assessments of the project before they Go-live in Prod.



Communication – Build and present documentation to executive management aimed at communicating potential risks and providing recommendations. Provide feedback to and participate in implementation of security assessment processes across the organization. Understand strategic goals and embed cyber risk management into the culture of the line of business, acting as both a feedback loop across IS, Cyber Consultants Business and the enterprise. Respond to BU queries in support of the business programs and projects Delivery and Execution – You will help us execute detailed threat risk and information security assessments, deviations, coordination of penetration testing and reporting. Establish priorities specific to information security duties and conduct Threat Models. Help us complete requests from external partners (corporate and institutional clients) and recommend new controls to reduce risks. Contribute to the identification of key controls or design controls as appropriate. Understand CIBC’s Control Framework, Control and Deficiency Management Policy (and US Supplement) and definition of key control. Leadership & Communication – Collaborate with senior leaders across the company and make informed recommendations to enhance information system security. Weigh business needs against security concerns and provide risk-based recommendations to improve information systems security, which are practical and achievable, thereby allowing the Lines of Business to make informed risk decisions. Who you are You can demonstrate experience in Information Security, Threat-risk assessments, Vulnerability & Penetration testing, and application security development projects. Familiarity with

📌 Senior Information Security Specialist (Toronto)
🏢 CIBC
📍 Toronto