Senior Enterprise Security Governance Advisor, Information Technology

Senior Enterprise Security Governance Advisor, Information Technology

Job order - J1024-0094 - Full-time Title Senior Enterprise Security Governance Advisor, Information Technology Category Information Technology City Toronto/Mississauga, Ontario, Canada Job Description Senior Enterprise Security Governance Advisor, Information Technology Company Information: CIBC Mellon is a leading provider of asset servicing solutions to institutional investors in Canada, including multi-currency accounting, fund valuation, and investment information reporting.

We are passionate about providing exceptional client service backed by our culture of innovation and success.







Our outstanding employee experience will provide you with opportunities to learn and grow professionally while supporting the communities in which you live and work. We are a diverse and dynamic workplace where employees take an active role in delivering on strategic objectives while advancing their individual career goals.

We encourage innovative thinking and give our employees the support and resources they need to turn great ideas into actions. We’re always looking for talented people who can make a meaningful difference for our clients, our company and our communities.

To learn more about why our employees love coming to work each day, visit www.cibcmellon.com/experience. Position Overview: Reporting to the Director, Enterprise Security Governance, the Senior Advisor, Enterprise Security Governance supports the development, implementation, and maintenance of the Information Technology risk governance framework. This role is responsible for providing assertion reports to involved parties (clients and vendors) that technology risks are being measured and managed appropriately. Responsibilities:





• Monitor service providers’ information security and privacy requirements to ensure they meet CIBC Mellon’s requirements to effectively mitigate risk across the organization. • Analyze and respond to security and privacy requirements on RFPs and questionnaires received from both existing clients and potential prospects to ensure that the CIBC Mellon responses identify the proper controls for Information Technology risk management and compliance. • Support new client contract agreement and negotiation process as it relates to information security and privacy. • Manage governance, risk, compliance activities across the Information Technology organization to ensure that risks are timely identified, triaged, reported and tracked to resolution.





• Sustain risk management strategies for CIBC Mellon Information Technology by establishing and documenting standards and methods to validate adherence. • Analyze external trends and regulations impacting the IT risk and compliance landscape and makes recommendations for mitigating controls. • Provide integrated reporting to determine the success of security strategies and programs. • Support effective working relationships with internal/external auditors, regulatory examiners, and lines of business to ensure that Information Technology risk requirements receive appropriate and timely attention. • Communicate with clients during quarterly and annual due diligence reviews. • Support third party vendor outreach program as it relates to security due diligence.





• Ensure IT audit, compliance and risk commitments and requirements are understood and effectively managed. Qualifications: • Bachelor's degree in Computer Science or equivalent • 5-7 years’ experience in a corporate IT department • CISA, CISM, Risk Management certifications are an asset • In-depth knowledge of applicable course work i.e. COBIT and ISO standards • Working knowledge of information technology ITIL environment • Technical writing and corporate communications experience is an asset CIBC Mellon's Values: Get it Right Every Day: Deliver service excellence while always acting with the highest ethical standards Put Clients at the Centre: Advocate for clients by listening,





sharing knowledge, and bringing the right solutions forward Be One Family: Challenge, empower and recognize your colleagues Take Ownership: Speak up, speak out, and make things better Skills Time & self management Reference 360436 Click here to apply