Senior Risk Manager, Operational Resilience

We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients.

At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute.

To learn more about CIBC, please visit CIBC.com

STRATEGIC BUSINESS UNIT DESCRIPTION  

CIBC is building a relationship-oriented bank for a modern world. Our role is to maintain an effective control environment and oversee the sound risk management of our bank, consistent with our Risk Appetite Statement. We help safeguard our reputation and brand while providing proactive advice and oversight of CIBC's compliance with regulatory requirements, including those related to consumer and investor protection, sales practices, securities trading, and anti-money laundering. 

JOB PURPOSE  

Reporting to the Director of Operational Resilience within the Operational Risk Management, this role will provide support in 2nd LOD review and challenge over the governance and execution of the Operational Resilience Program for CIBS’s Combined U.S. Operations (CUSO) in accordance with US Regulations, internal policies and industry practices. 

The Operational Resilience Program sits within CIBC’s Technology, Infrastructure and Innovation (TI&I) group.  The mandate of the Program is to identify and protect CIBC from threats and potential failures, respond and adapt to, as well as recover and learn from disruptive events to minimize their impact on the delivery of critical services through disruption. This involves effectively managing operational risk through a deep understanding of the end-to-end delivery of CIBC’s critical services, including the underlying technology, third parties, premises, people and data that support that service.  The resilience posture of these critical services is further informed through scenario stress testing to identify points of failures, gaps and areas requiring enhancements. 

The 2nd LOD Operational Resilience team, as part of the Operational Risk Management function, supports the Program mandate by ensuring the maintenance, continued enhancement, and evolution of the Operational Resilience risk framework.  Core responsibilities also include monitoring, assessment, and independent challenge of program execution, and providing consultative support for all 1st LOD activities.  The 2nd LOD Operational Resilience team also provides oversight for the Business Continuity Management program for the CUSO. 

KEY ACCOUNTABILITIES  

Operational Resilience 

• Challenge the Operational Resilience Program, including ongoing maintenance and operation to ensure business objectives are met while complying with internal, external and regulatory requirements in a highly regulated environment  

• Assist in the understanding of CIBC’s current Operational Resilience practices, capabilities and roadmap  

• Maintain and evolve a best-in-class Operational Resilience framework in tandem with developing regulatory requirements and industry best practices 

• Maintain a current understanding of regulatory trends and communicates to internal partners to ensure that regulatory changes in the resiliency area are understood and addressed within CIBC   

• Support the Operational Resilience Program execution in collaboration with internal partners (including TI&I, other Infrastructure partners, SBU representatives, functional groups, and other areas of Risk Management):  

• Review and challenge the identification of CIBC’s Critical Business Services (CBS) and Critical Shared Service (CSS) and ensure a register of criteria, ownership and key dependencies is maintained 

• Review and challenge that CBSs are mapped end-to-end and at an appropriate level of detail in order to identify technology, people, third parties, facilities and single points of failure (SPOF) for each CBS 

• Review and challenge impact tolerances for each CBS as defined by CBS owners  

• Review and challenge disruption risk scenarios used to assess each CBS and their components  

• Review and challenge operational resilience measures and metrics to ensure effective management of the enterprise operational resilience program  

• Assist in the development of monitoring and reporting program across CBSs 

• Ensure deficiencies are raised when warranted as per the Control and Deficiency Management Policy and issues are remediated in a fulsome and timely fashion