AddressWe’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients.
At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute.
To learn more about CIBC, please visit CIBC.com
What you'll be doing
As the Sr. Director, Cyber Threat Exposure Management on the Cyber Delivery and Operations team, you’ll work in a fast-paced environment focused on introducing new security services to the bank and maintaining controls to protect the bank against Cyber Threats. You will lead multiple teams focused on proactive identification, prioritization and reduction of cyber exposures. You’ll create and set the direction for a centralized enterprise Cyber Threat Exposure Management program that continuously seeks to improve the effectiveness, efficiency and speed of resolving security vulnerabilities. You’ll foster key relationships with internal partners to guide and drive remediation, ensure scanning and testing controls continually operate with excellence, and design and deliver dashboards and executive reporting to effectively govern and manage remediation activity. You’ll build, streamline and automate processes to support continued growth at scale given the accelerating pace of the cyber and technology landscape.
At CIBC we enable the work environment most optimal for you to thrive in your role. To successfully perform the work, you’ll have the flexibility to manage your work activities within a hybrid work arrangement where you’ll spend 1-2 days per week on-site, while other days will be remote..
How you'll succeed
Proactive vulnerability management – Ensure effective and efficient execution of existing security controls that focus on the proactive detection and timely remediation of security exposures. This includes controls such as maintaining a comprehensive view of the organization’s attack surface, vulnerability scanning, security testing and red teaming activities.
Process optimization and change adoption – Develop and continuously improve security exposure identification and reduction practices, with a focus on harmonizing common output and activities across different teams (e.g. vulnerability management, offensive security) such as risk assessment, stakeholder engagement on patching and remediation, and risk and compliance reporting.
Strategic Exposure Management – Assess intelligence related to threat actors and their motivations and combine this with an understanding of attack surface and controls to effectively evaluate and prioritize risk and develop strategic exposure reduction actions.
Relationship building - Grow your network, deepen relationships, and guide and collaborate with internal threat intelligence, technology and risk functions across the organization to reduce risk by ensuring that exposures are promptly and effectively addressed within established timeframes.
Enhanced reporting and governance – Enhance and maintain metrics and dashboards to measure, track and report on Cyber Threat Exposure Management. This will provide various key stakeholders (e.g. Information Security management, Technology teams, Executives) with an ongoing understanding of risk and compliance status and enable prompt escalation and action.
Proactive preparedness – Lead the planning, coordination and execution of various cyber exercises designed to test preparedness in response to cyber events with the participation of cross-functional teams.
Rapid response – Leverage technical expertise, collaboration and strong communication skills to effectively navigate and address complex Threat Exposure scenarios with urgency
Who you are
You embrace and advocate for change. You continuously evolve your thinking and the way you work in order to deliver your best.
You're passionate about people. You find meaning in relationships and surround yourself with a diverse network of partners. You connect with others through respect and authenticity.
You give meaning to data. You enjoy investigating complex problems and making sense of information. You communicate detailed information in a meaningful way.
You are a caring and accountable leader. You have experience developing and implementing strategic team goals. You have experience coaching employees and inspiring successful team performance.
You can demonstrate experience in vulnerability management and remediation. It’s an asset if you have experience leading teams responsible for attack surface management, vulnerability and patch management, threat intelligence, threat modeling and risk assessments, penetration testing, red teaming, asset management and/or application security.
You look beyond the moment. You know what you do will make a difference today and tomorrow. You look for new opportunities to define what's possible
Values matter to you. You bring your real self to work and you live our values - trust, teamwork, and accountability.
What CIBC Offers
At CIBC, your goals are a priority. We start with your strengths and ambitions as an employee and strive to create opportunities to tap into your potential. We aspire to give you a career, rather than just a paycheck.
We work to recognize you in meaningful, personalized ways including a competitive salary, incentive pay, banking benefits, a benefits program*, defined benefit pension plan*, an employee share purchase plan, a vacation offering, wellbeing support, and MomentMakers, our social, points-based recognition program.
Our spaces and technological toolkit will make it simple to bring together great minds to create innovative solutions that make a difference for our clients.
We cultivate a culture where you can express your ambition through initiatives like Purpose Day; a paid day off dedicated for you to use to invest in your growth and development.
*Subject to plan and program terms and conditions
What you need to know
CIBC is committed to creating an inclusive environment where all team members and clients feel like they belong. We seek applicants with a wide range of abilities and we provide an accessible candidate experience. If you need accommodation, please contact Mailbox.careers-carrieres@cibc.com
You need to be legally eligible to work at the location(s) specified above and, where applicable, must have a valid work or study permit.
Job Location
Toronto-81 Bay, 19th FloorEmployment Type
RegularWeekly Hours
37.5Skills
Cybersecurity Strategies, Cyber Threat Prevention, Leadership, Vulnerability Management
