Technology & Cybersecurity Risk Consultant

We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients.

At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute.

To learn more about CIBC, please visit CIBC.com

Technology Infrastructure and Innovation (TI&I) spans the areas of Technology, Information Security, Deposit Operations, Loan Operations, Project Management, Data Management Office, Corporate Real Estate, Corporate Security, and Risk & Governance. TI&I delivers operational excellence by effectively managing the technology and operations required to run the bank, enables the bank's transformation by focusing on clients, innovating for the future and simplifying operations and supporting the bank's growth objectives through flawless execution of strategic initiatives.

Governance and Oversight is a First Line control group within the Three Lines of Defense model. As a first line control group, we empower CIBC’s Control Framework, which sets out the objectives for the design of the internal control environment aligned to the Risk Appetite Statement (RAS). We serve the Bank’s strategy to deliver a superior client experience through the stewardship of sustained and effective risk discipline. US TI&I Governance & Oversight enables the Bank’s strategic mandate to maintain financial strength and risk discipline while advancing our purpose-driven culture. We collaborate with the strategic Business Units and work across Functional Groups to grow our business resiliency and value while managing risk. In addition, we steward the processes for assessing the design and operating effectiveness of the internal control environment, and we strengthen the CIBC Risk Management Framework with related policies and processes. 

What You’ll Be Doing

As the Technology & Cybersecurity Risk Consultant, you will be responsible for working with peer and your leadership team in conducting risk assessments, providing advisory to TI&I Technology and Cyber business leaders, and reporting on operational risk and controls. You support the identification, escalation, assessment, and mitigation of risks in Technology & Cyber, driving continuous improvement in control compliance and procedures. You also research and apply industry and organization frameworks to support the organizations during the risk assessment process to identify and evaluate risks and controls according to operational risk standards, policies and procedures. Additionally, you are responsible to support your leadership team in making sound recommendation that influences appropriate risk treatment to minimize residual risk, and partner with the business to remediate existing deficiencies in a timely manner. You work closely with cross-functional teams to establish and maintain robust control frameworks and act as an integrator and liaison with all lines of defense with effective communication as you consult on risk profiles, emerging trends, and any new risks arising from regulatory changes. Staying updated on industry trends and regulatory changes affe