Director, US Third Party Governance and Regulatory Support

We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients.

At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute.

To learn more about CIBC, please visit CIBC.com

What you'll be doing

As the Director of Third Party Risk Governance and Regulatory Support, you will lead our efforts in managing third-party risk and ensuring governance and compliance with regulatory requirements. You will be responsible for developing and implementing risk governance frameworks, policy and procedure that align with CIBC's strategic objectives. Your expertise in risk management will help us identify, assess, and mitigate risks associated with third-party relationships, ensuring that our business operations remain secure and compliant. Part of your role will also involve coordination and provision of governance to services that are provided by the Enterprise to the region or by other regions of the bank as a service consumer.

The role drives innovation across all areas of responsibility, applying expert interpersonal, communication, and problem-solving skills to lead the alignment of technology best practices and application strategies to help respective business lines achieve their targeted goals.

At CIBC we enable the work environment most optimal for you to thrive in your role.  You’ll have the flexibility to manage your work activities within a hybrid work arrangement where you’ll spend 1-3 days per week on-site, while other days will be remote. 

How you’ll succeed

• Governance and Compliance: Develop and maintain a comprehensive third-party risk governance framework that aligns with regulatory requirements and industry best practices. Ensure that all third-party relationships are assessed for risk and compliance.

• Risk Assessment and Mitigation: Oversee and provide governance for the execution of risk assessments for third-party vendors, identifying potential risks and recommending appropriate mitigation strategies. Collaborate with business units to ensure that risk management practices are integrated into vendor selection and management processes.

• Stakeholder Engagement: Build and maintain strong relationships with internal stakeholders, including Enterprise TPGO, control groups, second line of defense, internal audit, regulatory affairs, and operational teams, to ensure a cohesive approach to third-party risk management. Communicate risk findings and recommendations to executive management and other key stakeholders.

• Regulatory Support: Stay informed about regulatory changes and industry trends related to third-party risk management. Provide guidance and support to ensure compliance with applicable regulations and standards.

Who you are

• You are an experienced professional.  You have 7-10+ years of direct/related third party risk management experience with technology, cybersecurity operations and governance oversight. You are a strategic comprehensive leader with a background in Cybe