We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients.
At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute.
To learn more about CIBC, please visit CIBC.com
What you’ll be doing
As a Senior Consultant, Cryptographic Service Management, you will join CIBC’s Cybersecurity department to play a critical role in shaping and evolving the enterprise-wide cryptographic strategy. This position focuses on ensuring the security and resilience of CIBC’s cryptographic services, including Hardware Security Modules (HSMs), key management, X.509 certificates, Public Key Infrastructure (PKI), cryptographic standards, and readiness for the Post-Quantum Cryptography (PQC) era. Your work will directly contribute to protecting Our Bank, Our Clients, and Our Employees by embedding security into the lifecycle of applications and data across the enterprise. You will act as a liaison between technology and business teams, serving as a subject matter expert (SME) for cryptography and digital certificate and key lifecycle management. A core accountability of this role is to lead Digital Certificate and Key Automation onboarding into CIBC’s enterprise digital certificate and key management platforms. You will own the onboarding intake and delivery end-to-end by identifying and prioritizing candidate applications, defining onboarding requirements, establishing automation patterns, coordinating technical implementation, and ensuring operational readiness. This includes documenting onboarding standards and runbooks, guiding application teams through integration (e.g., key and certificate discovery, issuance, renewal, revocation, and policy enforcement), and partnering with platform, infrastructure, IAM, and application delivery teams to scale certificate and key automation across the enterprise.
You will also provide strategic insights, report on service performance using Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs), and ensure the department’s cryptographic services—including the digital certificate and key automation program—align with enterprise goals, regulatory expectations, and industry best practices.
At CIBC, we enable a work environment that is optimal for you to thrive in your role. You’ll have the flexibility to manage your work activities within a hybrid work arrangement, where you’ll spend 1–3 days per week on-site, while other days will be remote.
How you’ll succeed
- Cryptographic Expertise: Manage and oversee the development and maintenance of strategic roadmaps for the domain of Data Security, leveraging deep knowledge of cryptographic technologies, including HSMs, key management, X.509 certificates, PKI, and cryptographic standards. Collaborate with various stakeholders to gather requirements, develop business cases, and lead subsequent projects (including POCs) to support the strategy. Maintain a continuous improvement mindset, evaluating and implementing new cryptographic technologies such as Post-Quantum Cryptography to address emerging threats and enhance the security of the domain. Provide guidance on the secure design, implementation, and operation of cryptographic services across the enterprise. Direct the review, development, testing, and implementation of cryptographic security plans, products, and control techniques.
- System & Application Integration Expertise: Demonstrate deep, hands-on knowledge of system and application integration patterns required to operationalize cryptographic services and certificate automation at scale. Lead and support integrations between enterprise platforms, PKI/CA/key services, KMIP, IAM, network and infrastructure services, and diverse application stacks (cloud, on-prem, containerized, legacy). Define integration requirements and technical designs for key and certificate discovery, enrollment, renewal, rotation, revocation, and policy enforcement. Understand and guide the use of APIs, service accounts, authentication and authorization models (e.g., mTLS, OAuth), secrets management, CI/CD and IaC tooling, and operational monitoring to enable resilient automated certificate lifecycle management. Troubleshoot integration issues across application, middleware, and infrastructure layers to remove blockers and accelerate onboarding.
- Communication and Leadership: Build and present documentation to executive management and leadership teams, effectively conveying complex cryptographic concepts, strategies, and the benefits of proposed security programs. Provide awareness and training to application development teams on cryptographic services, data protection, and industry best practices. Assess business needs against potential risks and communicate recommendations to enhance the organization’s information security landscape. Demonstrate exceptional collaboration and stakeholder management skills to drive alignment across diverse teams.
- Advisory and Relationship Management: Act as a trusted advisor within the broader team, influencing application development, operational, and infrastructure teams to integrate cryptographic security controls into their design and product delivery. Stay abreast of the latest threat landscape, proactively assessing emerging threats and their impact on organizational security posture. Maintain relationships with peers from other banks and manage vendor relationships for security services and tools within the Cryptographic Services domain.
- Analytical and Security Knowledge: Define and report on KPIs and KRIs to measure cryptographic service performance and risk. Apply strong problem-solving skills to analyze complex security challenges and propose effective solutions. Demonstrate a thorough understanding of enterprise security frameworks, data protection, risk management principles, and regulatory requirements and industry standards related to cryptographic security. Act as a security ambassador, advocating for cryptographic best practices and influencing infrastructure and application design activities.
Who you are
- You can demonstrate 8 years of experience in cryptographic security concepts. You have implemented cryptographic solutions and methodologies to ensure the secure design of applications and the protection of sensitive data. You have been a key contributor to, or have led, cryptographic security initiatives such as encryption of data (at rest, in transit, and in use), as well as key management and cryptographic controls. You possess a strong understanding of data governance, data privacy, and regulatory requirements related to cryptography. You bring a passion for cryptographic security, vulnerability management, and adherence to industry cryptographic standards and best practices. You can identify needs and contribute to governance initiatives by bringing expertise gained in the cryptography field around practical security governance, including the development of CIBC policies, standards, procedures, and guidelines.
- You can demonstrate technical expertise in support of all activities, processes, procedures, and tools related to cryptographic services. You have experience with key and certificate management systems, protocols, processes, as well as cryptographic hardware such as Hardware Security Modules (HSMs).
- You’re a certified professional. You hold a CISSP, CISA, or CISM designation and are in good standing.
- You have a degree or diploma in Computer Science, Engineering, or a related field.
- Your influence makes a difference. You know that relationships and networks are essential to success. You inspire outcomes by sharing your expertise.
- You know that details matter. You notice things that others don't. Your critical thinking skills help to inform your decision-making.
- Values matter to you. You bring your real self to work, and you live our values: trust, teamwork, and accountability.
#LI-TA
What CIBC Offers
At CIBC, your goals are a priority. We start with your strengths and ambitions as an employee and strive to create opportunities to tap into your potential. We aspire to give you a career, rather than just a paycheck.
We work to recognize you in meaningful, personalized ways including a competitive salary, incentive pay, banking benefits, a benefits program*, defined benefit pension plan*, an employee share purchase plan, a vacation offering, wellbeing support, and MomentMakers, our social, points-based recognition program.
Our spaces and technological toolkit will make it simple to bring together great minds to create innovative solutions that make a difference for our clients.
We cultivate a culture where you can express your ambition through initiatives like Purpose Day; a paid day off dedicated for you to use to invest in your growth and development.
*Subject to plan and program terms and conditions
What you need to know
CIBC is committed to creating an inclusive environment where all team members and clients feel like they belong. We seek applicants with a wide range of abilities and we provide an accessible candidate experience. If you need accommodation, please contact Mailbox.careers-carrieres@cibc.com
CIBC is committed to clarity in our hiring process. All roles posted are opportunities we’re actively recruiting for, unless stated otherwise.
You need to be legally eligible to work at the location(s) specified above and, where applicable, must have a valid work or study permit.
We may ask you to complete an attribute-based assessment and other skills test (such as simulation, coding, French proficiency).
We use artificial intelligence tools during the recruitment process. Our goal for the application process is to get to know more about you, all that you have to offer, and give you the opportunity to learn more about us.
Job Location
Toronto-81 Bay, 19th Floor
Employment Type
Regular
Weekly Hours
37.5
Skills
Accountability, Certificate Management, Collaboration, Communication, Cryptography, Data Encryption, Data Security, Hardware Security Modules (HSM), Information Security, Key Management, Product Integration, Secure Shell (SSH), Services Management, Software Integration, Vendor Integration
