Information Security Metrics and Reporting Analyst
Listed on 2025-12-27
-
IT/Tech
Data Security, Cybersecurity
Information Security Metrics and Reporting Analyst
Join to apply for the Information Security Metrics and Reporting Analyst role at CIBC US
Job PurposeAs an Analyst within the US Information Security Data Science and Reporting team, you will play a critical role in supporting the CSO organization’s metrics, reporting, and analytics, providing ongoing and initiative support. You will be responsible for the development, aggregation, evaluation, and communication of key metrics and insights that drive decision‑making across multiple legal entities and business lines. This role requires a blend of technical expertise, business acumen, and strong communication skills to deliver high‑impact reporting and support strategic projects.
Support may also include other teams under the Chief Security Office, including Fraud, Operational Resilience, Third Party Governance, and Physical Security.
Key Accountabilities Metrics Reporting and Analysis- Understand data and visualize for stakeholder consumption
- Aggregate CSO level reporting for packaging
- Apply base reporting template to legal entities and functional group reporting
- Support the creation, maintenance, and enhancement of dashboards across multiple legal entities, including direct ownership of select BAU dashboards.
- Support creation of materials for various reporting committees and forums and address associated follow‑up requirements
- Coordinate reporting reviews and approvals
- Create and maintain reporting documentation, ensuring appropriate retention
- Collaborate with Enterprise and US service owners to identify, test, and implement new metrics; modify existing metrics as needed.
- Contribute to mandatory and enterprise projects such as RAS/KRI refresh, non‑RAS metrics refresh, US and Enterprise Data Strategy initiatives.
- Map metrics to domains, controls, and threats to ensure comprehensive coverage and continuous improvement.
- Support the management of the US Information Security AI and Automation inventory and roadmap.
- Build out use cases and automate reporting processes where feasible.
- Collaborate with stakeholders to document requirements and direct and prioritize automation efforts.
- Participate in enterprise, US region or department initiatives
- Assist US Information Security service owners in presenting metrics to stakeholders in a clear and impactful manner.
- Perform controls as assigned control performer
- Implement continuous improvement areas
- Create and maintain procedural documentation
- Complete ad hoc research and reporting requests
- Work closely with US CSO organization, Data Governance, AI Governance, 1B, 2
LOD and Enterprise, as required. - Support summer internship activities
- As an employee of CIBC, the incumbent must comply with all applicable CIBC and Line of Business policies, standards, guidelines and controls.
- As a key contributor to the business unit, this job has the authority to recommend changes to business processes in order to enhance operational efficiency and effectiveness.
- Following all aspects of the CIBC Code of Conduct, as well as all applicable CIBC policies, frameworks, guidelines, processes and controls
- At all times acting in accordance with our Purpose and shared values, to achieve our Bank’s strategic goals
- Understanding and following the qualitative and quantitative components of our Risk Appetite Statements
- Completing all annual Corporate Mandatory Training and Testing modules, as well as any additional business‑specific modules, as required and employing the learnings in daily activities and undertakings
- Escalating matters through one of the appropriate channels identified in the CIBC Code of Conduct (i.e., HR, management, Ethics Hotline, Whistle blower, etc.) upon observing activities that may be inconsistent with CIBC’s policies, frameworks, guidelines, processes and controls
- Speaking up if witnessing behaviors that drive poor or unfair outcomes for clients, team members or other stakeholders
- Escalating matters that can result in adverse market practices and outcomes, thereby negatively impacting CIBC’s…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).