Senior Consultant, Supplier Risk Management

CIBC US

Senior Consultant, Supplier Risk Management at CIBC responsible for Third Party due diligence assessments. Partnering with business and technology teams to identify and mitigate potential risks.

Posted 5/31/2026full-timeToronto • 🇨🇦 CanadaSeniorWebsite

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Conducting Third Party due diligence assessments to identify potential risks
Partner with line of business, Third Party suppliers, technology teams to identify potential risks
Execute detailed Information Security risk assessments for key Third Party suppliers
Conduct ongoing monitoring of these suppliers and provide detailed reporting/analytics
Provide direction and remediation to Third Parties and business partners
Maintain and manage third party risk database
Build and present documentation to executive management
Research, design, and implement security monitoring practices

Requirements

What you’ll need

Experience in Information Security
Threat-risk assessments
Vulnerability & Penetration testing
Application security development projects
Familiarity with the Financial Services industry (asset)
Experience in Cloud Computing technologies (asset)
Exposure to Agile Development processes (asset)
CISSP certification (asset)
Security checks, including a criminal record check must be successfully completed

Benefits

Comp & perks

Competitive salary
Incentive pay
Banking benefits
Benefits program*
Defined benefit pension plan*
Employee share purchase plan
Vacation offering
Wellbeing support
MomentMakers, our social, points-based recognition program
Purpose Day; a paid day off dedicated for you to use to invest in your growth and development

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Information SecurityThird Party due diligence assessmentsThreat-risk assessmentsVulnerability testingPenetration testingApplication securitySecurity monitoring practicesCloud Computing technologiesAgile Development processesRisk assessments

Soft Skills

CommunicationCollaborationAnalytical skillsPresentation skillsProblem-solvingDirection and remediation

Certifications

CISSP