Consultant, Supplier Risk Management

Job Description

We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients. At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute. To learn more about CIBC, please visit CIBC.com What You’ll Be Doing You are passionate about Information Security and Risk Advisory services and want to join our growing information security group. As a Consultant, Supplier Risk Management you will be responsible for conducting Third Party due diligence assessments to identify potential risks to help our technology and business stakeholders meet security goals and objectives. Utilizing your relationship building skills, you will partner with line of business, Third Party suppliers, technology teams and help them proactively identify potential risks and present recommendations that are practical and achievable. At CIBC we enable the work environment most optimal for you to thrive in your role. You’ll have the flexibility to manage your work activities within a hybrid work arrangement where you’ll spend 1-3 days per week on-site, while other days will be remote. How You’ll Succeed Advisory/Assessment Services – Conduct ongoing Third Party due diligence, including the review of independent assurance reports to help determine the potential information security risk to CIBC. Assess business needs against potential risks and provide your recommendations to enhance our information security landscape. Delivery and Execution - You will help us execute detailed Information Security risk assessments for key Third Party suppliers, conduct ongoing monitoring of these suppliers and provide detailed reporting/analytics. Provide direction and remediation directions to Third Parties and business partners. Maintain and manage third party risk database to ensure proper risk management and proper awareness. Communication - Build and present documentation to executive management aimed at communicating potential risks and providing recommendations. Provide feedback to and participate in the design and implementation of security assessment processes across the organization. Research, design, and implement security monitoring practices and operationalize these processes across the group. Mailbox Management – You will excel by efficiently organizing communications, maintaining secure records, leveraging email automation tools, and ensuring timely stakeholder engagement with attention to detail. Who You Are You can demonstrate experience in Information Security, Threat-risk assessments, Vulnerability & Penetration testing, and application security development projects . Familiarity with the Financial Services industry. This role is supporting the Capital Markets, International, Commercial Payments & Wealth ecosystem. Experience in Cloud Computing t

Required Skills