Director, Security Services Management

We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients.

At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute.

To learn more about CIBC, please visit CIBC.com

JOB PURPOSE   

Oversight and Management of strategic Information Security objectives for security services. 

The role is a seasoned professional responsible for directing and coordinating the enterprise‐wide implementation and maintenance of policies and standards that guide and support Information Security across the organization. The role exercises a high degree of independent judgement, playing a critical role in managing Information Security risks in line with CIBC’s risk appetite.

The Director of Security Services Management provides leadership to a team in establishing operational objectives and work plans, monitoring external information security risk trends, analyzing their impact on current Information Security plans, and ensuring appropriate enhancements are made.

KEY ACCOUNTABILITIES  

• Direct Security Services Management team to ensure security tools, capabilities, and controls meet organizational necessities for Confidentiality, Integrity, and Availability for the following information security domains:
  • Data Security
  • Identity and Access Management
  • Application Security
  • Cloud and Infrastructure (Network and Endpoint) Security
  • Cyber operations and Incident Management
• Oversight and Governance - Oversee a collection of projects, programs and other activities that are grouped together to meet strategic Information Security objectives. Define, implement and continuously improve robust methodology for governance. 

• Program Execution – Transition strategic milestones and initiatives into programs and projects for delivery teams to execute. Develop and manage portfolio-level metrics and reporting, documentation, and artifacts. Coordinate and report on project portfolio health, trend analysis for plan and budget including annual planning and quarterly/monthly forecasts. Lead the execution of assigned strategic initiatives assessing and adapting as needed to ensure quality of execution and total ownership. 

• Relationship Building - Establish and leverage peer relationships within the US Region and parent bank organizations. Act as a liaison among cybersecurity stakeholders, business unit functional areas, and project delivery teams to ensure effective coordination among participating groups. 

KNOWLEDGE AND SKILLS  

• Preferred Formal Education:  ​Bachelor's Degree​ 

• Minimum 10+ years of experience in information security with 4+ years of that experience at a financial institution of similar scope and scale 

• Certified professional with current Industry recognized certifications such as CISSP, CISM, CISA  

• Demonstrated experience in managing a large portfolio of complex global projects including technology implementations and cybersecurity initiatives 

• Demonstrated experience as technical leader in project management and stakeholder management 

• Leadership and advisory roles for major functions and/or initiatives with the responsibility, authority and discretion for decision-making  

• Technical background, sufficient depth and breadth to be able to recognize and successfully exploit opportunities for effective development or usage of IT, and lead/guide fully experienced technical specialists 

• Highly developed analytical and conceptual skills 

• Strong critical thinking skills and solution focused   

• Takes initiative to go above and beyond to deliver results 

At CIBC we enable the work environment mo