Consultant, Technology Controls

Location: Toronto, ON; hybrid work with 1–3 days per week on-site and the remaining days remote

Company

CIBC is a relationship-oriented bank providing financial services and technology-enabled banking solutions.

What you will do

• Perform quarterly testing of SOX and non-SOX technology controls across applications and infrastructure.
• Gather and document evidence, test results, findings, and control deficiencies.
• Prepare risk assessment packages and coordinate the collection of artifacts required for control testing.
• Participate in meetings with internal audit and the external audit firm as technology controls are presented.
• Investigate compliance issues, assess operational controls, and provide recommendations for corrective action.
• Develop detailed plans, reports, models, and conclusions to support risk and compliance decisions.

Requirements

• 3+ years of experience in technology audit, controls, and governance.
• Experience identifying control gaps, assessing controls, and recommending improvements.
• Working knowledge of technology control frameworks and regulatory requirements.
• Current CISSP or CISA accreditation in good standing.
• Legally eligible to work in Canada and able to complete required security and criminal record checks.
• Strong critical thinking, problem-solving, communication, collaboration, and relationship-building skills.

Culture & Benefits

• Hybrid work arrangement with flexibility to manage work activities.
• Competitive salary, incentive pay, banking benefits, and an employee benefits program.
• Defined benefit pension plan, employee share purchase plan, vacation, and wellbeing support.
• Professional recognition through a social, points-based recognition program.
• Paid Purpose Day for personal growth and development.
• Inclusive workplace with accessible candidate support.

Hiring process

• Potential attribute-based assessments and skills tests, including French proficiency testing where applicable.
• Security checks, including a criminal record check, must be completed before starting; an annual check may also be required.