Director - Governance and Control

We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients.

At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute.

To learn more about CIBC, please visit CIBC.com

What You’ll Be Doing:

The US Business Management group provides direct day-to-day support for CIBC’s US Capital Markets business, primarily Sales and Trading, Debt Capital Markets and Corporate and Investment Banking. The group’s primary role is to assist in achieving the mandate to be a premier client-focused global bank.

The Business Management Risks and Controls team (the Team) is responsible for managing governance and controls for the US Capital Markets. It serves as the primary liaison between all Capital Markets Front Office teams, and the Infrastructure and Risk/ Compliance Partners. The Team supports the Capital Markets Front Office businesses identify, catalogue and test all risks and controls for existing and new products.  US Business Management strives to ensure a sound control environment and provides support the execution of business strategy. This role is responsible for providing assessment, consulting, and reporting on a comprehensive inventory of operating risk and controls involving people, technology, processes or external events that arise from audit and control testing.

The role applies advanced concepts to provide guidance to lines of business during the risk assessment process to identify and evaluate risks and controls according to operational risk standards, policies and procedures. The role is accountable for the implementation, maintenance and adherence of governance and control initiatives, programs, and processes. The incumbent may also be required to participate in initiatives, project and committees as assigned.

The role will make decisions that influence department plans, regularly recommending new processes/ controls to develop the appropriate risk treatment for all identified, open issues. The role uses independent judgement to determine methods and approaches to work, monitoring and reviewing operational risks identified during audits.

How You’ll Succeed

The role will primarily be responsible for the following:

• Independently plan, coordinate, and conduct the full RCSA lifecycle, including risk identification, cause analysis, control identification, evaluation, documentation, and validation of control effectiveness. Ensure all RCSA processes are robust, accurately reflect business risks, and are completed in accordance with internal standards.

• Facilitate workshops with process/ control owners, gather evidence, assess residual risks, and ensure timely completion and reporting of RCSA results.

• Prepare, working with Business Managers and Business, detailed process maps to document workflows, controls, and risk points for each business covered in the RCSA.

• Provide businesses with advice regarding development of their Policies and Procedures, project plans, business requirements, executive presentation materials and training materials. Participation in ad-hoc business and CIBC-wide projects and committees, as required.

• Identify missing controls and/or gaps and weaknesses in existing controls and recommend corrective actions to mitigate the mapped risks. Advising businesses on the implementation and monitoring of Business-Managed Technology controls.

• Organize, lead, and facilitate meetings with stakeholders across business units and support functions to discuss risk and controls, findings, improvements, and action plans.

• Compile reports summarizing assessment results, key findings, and recommendations and present these to business management and other stakeholders.

• Track the implementation of agreed-upon remediation actions, ensuring timely completion and reporting on progress.

• Stay abreast of relevant regulations and industry best practices, ensuring all risk and control activities comply with internal policie