Consultant, Information Security

We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients.

At CIBC, we embrace your strengths and your ambitions, so you are empowered  team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute.

To learn more about CIBC, please visit

You’ll be joining the Security Services Management team within CTPR, working at the forefront of application security across the enterprise. As an Information Security Consultant, you will lead and deliver application security initiatives that embed security and protection throughout the application lifecycle. Your work will help strengthen CIBC's overall security posture by ensuring applications are designed, built, and operated securely – protecting Our Bank, Our Clients, and Our Employees.

You will also provide subject‑matter expertise to support the development of policies, standards, and procedures that enhance risk management and enable secure business outcomes.

At CIBC we enable the work environment most optimal for you to thrive in your role. You’ll have the flexibility to manage your work activities within a hybrid work arrangement where you’ll spend 1-3 days per week on-site, while other days will be remote.

• Service Management – Manage and oversee selected services within the Application Security domain. Develop and maintain service health dashboards, providing regular reporting and insights to management. Drive continuous improvement of the application security program by maintaining the operational backlog and supporting remediation and App Sec training related activities.
• Governance – Contribute to application security governance by providing technical and business advice on application protection and risk management. Support the development and maintenance of application security roadmaps aligned to enterprise strategy. Collaborate with stakeholders to define requirements and deliver initiatives that advance the application security program. Contribute to the development and evolution of governance, risk, and security‑related policies.
• Communication, Enablement & Automation – Develop and present clear, concise documentation for leadership that communicates the value and impact of application security programs. Provide security awareness and guidance to application development teams, promoting the benefits of building security earlier in the software development lifecycle. Identify and support opportunities for process automation and reporting improvements that enhance the efficiency, scalability, and effectiveness of the application security program.

• You can demonstrate experience in application security services, such as managing SAST, DAST, penetration testing, or similar security capabilities along with a solid understanding of industry standards and best practices. You have experience building strong relationships across the organization and can clearly communicate security requirements to drive positive outcomes. You have knowledge across multiple application security domains in cloud and/or on‑premise environments, including SAST, DAST, penetration testing, web application firewall (WAF), runtime protection, mobile application protection, and broader threat and vulnerability management capabilities.
• You’re a certified professional; industry certification such as CISSP is considered an asset.
• You embrace and advocate for change. You continuously evolve your thinking and the way you work to deliver your best.
• You give meaning to data. You enjoy investigating complex problems and making sense of information. You communicate detailed information in a meaningful way. You have experience with tools such as Power BI.
• Values matter to you. You bring your real self to work and you live our values – trust, teamwork, and accountability.

At CIBC, your goals are a priority. We start with your strengths and ambitions as an employee and strive to create opportunities to tap into your potential. We aspire to give you a career, rather…