Information Security Metrics and Reporting Analyst

We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients.

At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute.

To learn more about CIBC, please visit CIBC.com

JOB PURPOSE 

As an Analyst within the US Information Security Data Science and Reporting team, you will play a critical role in supporting the CSO organization’s metrics, reporting, and analytics, providing ongoing and initiative support. You will be responsible for the development, aggregation, evaluation, and communication of key metrics and insights that drive decision-making across multiple legal entities and business lines. This role requires a blend of technical expertise, business acumen, and strong communication skills to deliver high-impact reporting and support strategic projects.

Support may also include other teams under the Chief Security Office.  Support may include and is not limited to Fraud, Operational Resilience, Third Party Governance & Physical Security.

KEY ACCOUNTABILITIES

Metrics Reporting and Analysis:

• Understand data and visualize for stakeholder consumption
• Aggregate CSO level reporting for packaging
• Apply base reporting template to legal entities and functional group reporting
• Support the creation, maintenance, and enhancement of dashboards across multiple legal entities, including direct ownership of select BAU dashboards.
• Support creation of materials for various reporting committees and forums and address associated follow up requirements
• Coordinate reporting reviews and approvals
• Create and maintain reporting documentation, ensuring appropriate retention

Metrics Development and Projects:

• Collaborate with Enterprise and US service owners to identify, test, and implement new metrics; modify existing metrics as needed.
• Contribute to mandatory and enterprise projects such as RAS/KRI refresh, non-RAS metrics refresh, US and Enterprise Data Strategy initiatives.
• Map metrics to domains, controls, and threats to ensure comprehensive coverage and continuous improvement.

AI and Automation:

• Support the management of the US Information Security AI and Automation inventory and roadmap.
• Build out use cases and automate reporting processes where feasible.
• Collaborate with stakeholders to document requirements and direct and prioritize automation efforts.

Projects

• Participate in enterprise, US region or department initiatives

General

• Assist US Information Security service owners in presenting metrics to stakeholders in a clear and impactful manner.
• Perform controls as assigned control performer
• Implement continuous improvement areas
• Create and maintain procedural documentation
• Complete ad hoc research and reporting requests
• Work closely with US CSO organization, Data Governance, AI Governance, 1B, 2LOD and Enterprise, as required.
• Support summer internship activities

COMPLIANCE REQUIREMENTS/RESPONSIBILITIES

• As an employee of CIBC, the incumbent must comply with all applicable CIBC and Line of Business policies, standards, guidelines and controls.  

AUTHORITIES/DECISION RIGHTS 

• As a key contributor to the business unit, this job has the authority to recommend changes to business processes in order to enhance operational efficiency and effectiveness.

CONDUCT & CULTURE RISK

Our CIBC risk culture is based on employees striving to exceed the expectations of ourselves and our leadership’s identification and mitigation of risks in their daily responsibilities, not just in quarterly or annual monitoring/assessments.  We all are accountable for managing risk.

As an employee of CIBC the incumbent must conduct themselves (and foster