Sr. Consultant, Information Security

CIBC Bank on your terms with CIBC – whether it’s in person, over the phone or online, CIBC has you covered.

View company page

We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients.

At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute.

To learn more about CIBC, please visit CIBC.com

What You’ll Be Doing

You’ll be joining the Security Engineering team in building robust information security technology that keeps the bank safe. As a Sr. Information Security Consultant, you’ll be focused on assessing, designing, and building technology for key and secrets management. You’ll help drive the deployment of a new secrets management vault, and you’ll make recommendations for its configuration to achieve high security, low cost, and timely delivery. You’ll also help maintain the currency and security of the Hashicorp ecosystem, and play a role in the intake workflow of the platform. This role is an excellent opportunity to join a world class team within a great organization and assist with meeting a large enterprises growing Information Security needs.

At CIBC we enable the work environment most optimal for you to thrive in your role. Details on your work arrangement (proportion of on-site and remote work) will be discussed at the time of your interview.

How You’ll Succeed

Information Security Engineering- Designing and building integrated Information Security solutions that meet the needs of a large enterprise. Constantly evaluating our security posture and staying up to date with relevant industry perspective

Secrets Management Engineering - Develop and maintain processes and procedures for administering an enterprise secrets vault. Create policy-as-code for Hashicorp Vault, and develop robust, repeatable on-boarding patterns for deploying secrets management automation to new applications.

Leadership & Communication- Collaborate with senior leaders across the company and make informed recommendations to enhance information system security. Weigh business needs against security concerns and provide risk-based recommendations to improve information systems security, which are practical and achievable, thereby allowing the Lines of Business to make informed risk decisions

Who You Are

You can demonstrate experience insecrets management. You have a strong conceptual understanding of identity and access management, authentication and authorization, and secrets storage. You have worked with Hashicorp Vault.

You can demonstrate experience in CI/CD pipelines (Github actions preferred), Ansible, Configuration-as-Code/Infrastructure-as-Code (Bicep, JSON, Terraform), API knowledge. Python, GO, Azure AAD, and Kubernetes experience are nice-to-haves.

You can demonstrate experience as an expert in Information Security Management, with minimum 5 years of experience as an Information Security Consultant or similar role.

You have a degree/diploma in Computer Science, Engineering or related field. It’s a huge asset if you have CISSP, CISA or CISM designations.

You act like an owner. You thrive when you're empowered to take the lead, go above and beyond, and deliver results.

You’re digitally savvy. You seek out innovative solutions and embrace evolving technologies. You can easily adapt to new tools and trends.

Values matter to you. You bring your real self to work and you live our values – trust, teamwork and accountability

What CIBC Offers

At CIBC, your goals are a priority. We start with your strengths and ambitions as an employee and strive to create opportunities to tap into your potential. We aspire to give you a career, rather than just a paycheck.

We work to recognize you in meaningful, personalized ways including a competitive salary , incentive pay, banking benefits, a benefits program*, defined benefit pension plan*, an employee share purchase plan, a vacation offering, wellbeing support, and MomentMakers, our social, points-based recognition program.

Our spaces and technological toolkit will make it simple to bring together great minds to create innovative solutions that make a difference for our clients.

We cultivate a culture where you can express your ambition through initiatives like Purpose Day; a paid day off dedicated for you to use to invest in your growth and development.

*Subject to plan and program terms and conditions

What you need to know

CIBC is committed to creating an inclusive environment where all team members and clients feel like they belong. We seek applicants with a wide range of abilities and we provide an accessible candidate experience. If you need accommodation, please contact Mailbox.careers-carrieres@cibc.com

You need to be legally eligible to work at the location(s) specified above and, where applicable, must have a valid work or study permit.

Job Location

Toronto-81 Bay, 32nd Floor

We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients.

At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute.

To learn more about CIBC, please visit CIBC.com

What You’ll Be Doing

You’ll be joining the Security Engineering team in building robust information security technology that keeps the bank safe. As a Sr. Information Security Consultant, you’ll be focused on assessing, designing, and building technology for key and secrets management. You’ll help drive the deployment of a new secrets management vault, and you’ll make recommendations for its configuration to achieve high security, low cost, and timely delivery. You’ll also help maintain the currency and security of the Hashicorp ecosystem, and play a role in the intake workflow of the platform. This role is an excellent opportunity to join a world class team within a great organization and assist with meeting a large enterprises growing Information Security needs.

At CIBC we enable the work environment most optimal for you to thrive in your role. Details on your work arrangement (proportion of on-site and remote work) will be discussed at the time of your interview.

How You’ll Succeed

• Information Security Engineering- Designing and building integrated Information Security solutions that meet the needs of a large enterprise. Constantly evaluating our security posture and staying up to date with relevant industry perspective

• Secrets Management Engineering - Develop and maintain processes and procedures for administering an enterprise secrets vault. Create policy-as-code for Hashicorp Vault, and develop robust, repeatable on-boarding patterns for deploying secrets management automation to new applications.

• Leadership & Communication- Collaborate with senior leaders across the company and make informed recommendations to enhance information system security. Weigh business needs against security concerns and provide risk-based recommendations to improve information systems security, which are practical and achievable, thereby allowing the Lines of Business to make informed risk decisions

Who You Are

• You can demonstrate experience insecrets management. You have a strong conceptual understanding of identity and access management, authentication and authorization, and secrets storage. You have worked with Hashicorp Vault.

• You can demonstrate experience in CI/CD pipelines (Github actions preferred), Ansible, Configuration-as-Code/Infrastructure-as-Code (Bicep, JSON, Terraform), API knowledge. Python, GO, Azure AAD, and Kubernetes experience are nice-to-haves.

• You can demonstrate experience as an expert in Information Security Management, with minimum 5 years of experience as an Information Security Consultant or similar role.

• You have a degree/diploma in Computer Science, Engineering or related field. It’s a huge asset if you have CISSP, CISA or CISM designations.

• You act like an owner. You thrive when you're empowered to take the lead, go above and beyond, and deliver results.

• You’re digitally savvy. You seek out innovative solutions and embrace evolving technologies. You can easily adapt to new tools and trends.

• Values matter to you. You bring your real self to work and you live our values – trust, teamwork and accountability

What CIBC Offers

At CIBC, your goals are a priority. We start with your strengths and ambitions as an employee and strive to create opportunities to tap into your potential. We aspire to give you a career, rather than just a paycheck.

• We work to recognize you in meaningful, personalized ways including a competitive salary , incentive pay, banking benefits, a benefits program*, defined benefit pension plan*, an employee share purchase plan, a vacation offering, wellbeing support, and MomentMakers, our social, points-based recognition program.

• Our spaces and technological toolkit will make it simple to bring together great minds to create innovative solutions that make a difference for our clients.

• We cultivate a culture where you can express your ambition through initiatives like Purpose Day; a paid day off dedicated for you to use to invest in your growth and development.

*Subject to plan and program terms and conditions

What you need to know

• CIBC is committed to creating an inclusive environment where all team members and clients feel like they belong. We seek applicants with a wide range of abilities and we provide an accessible candidate experience. If you need accommodation, please contact Mailbox.careers-carrieres@cibc.com

• You need to be legally eligible to work at the location(s) specified above and, where applicable, must have a valid work or study permit.

Job Location

Toronto-81 Bay, 32nd Floor

Employment Type

Regular

Weekly Hours

37.5

Skills

Agile Methodology, Application Programming Interface (API), Cloud Security, Information Security, Information Security Engineering, Information Technology (IT), Key Management, Security Engineering, Troubleshooting Explore more InfoSec / Cybersecurity career opportunities

Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.

#J-18808-Ljbffr

---