Sr. Manager, Information Security - Governance & Regulatory

We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients.

At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute.

To learn more about CIBC, please visit CIBC.com

What you'll be doing

As a leader in the US Region Information Security team, you’ll work in a fast-paced environment where you will be empowered to make impactful contributions to mature and sustain our risk management program.

As an Information Security Senior Manager, you will be responsible for assessing and managing risks related to the confidentiality, integrity, and availability of the organization's information assets. You will work closely with other members of the Information Security department, as well as with business leaders, to identify, evaluate, and mitigate risks to the organization's information systems.

Work Arrangement: At CIBC we enable the work environment most optimal for you to thrive in your role. To successfully perform the work, you’ll work in a hybrid environment with the expectation to be onsite at least 2 days per week in Chicago Downtown while the other days may be remote.

How you'll succeed

• Strategy – Provide strategic thought leadership, building and regularly updating the US Region’s vision, roadmap, and backlogs related to Information Security. Gain and nurture support for the program through the creation of business cases and apprising senior and executive management. Execute and deliver on initiatives with agility and quality.

• Governance – Ensure program governance across US Information Security teams.

• Delivery and Execution – You will lead the execution of detailed risk assessments , reporting of risks, and coordination with impacted stakeholders. Complete ad hoc and urgent requests from internal and external partners, and recommend new controls to reduce risks.

• Project Management – Provides oversight of individual and team activities, supporting development of roadmaps and ensuring execution.

• Communication – Create powerful reports to executive management and external parties aimed at communicating Informational Security program maturity, organizational risks, status of key initiatives and projects that impact the US Region, and participate in the design and implementation of security assessment processes throughout the Information Security department.

• Teamwork and Relationship Building – Foster collaborative relationships with a wide range of stakeholders to identify opportunities to enhance Information Security processes and controls, understand pain-points and priorities, influence direction, solve problems, and ensure successful adoption and operation of policies and standards. Grow and deepen an external network of industry contacts and participate in external forums to monitor Information Security trends, developments, and best practices and to assist in the effective benchmarking and evolution of CIBC capabilities.

Who you are

• You have relevant experience.  You have at least 10 years of experience leading execution of information security risk and compliance assessments or audits based on industry standard frameworks and/or regulatory requirements in highly regulated industries (e.g., NIST, ISO, COSO, GLBA, NY DFS 500, FFIEC, PCI, etc.).

• You have Information Technology experience

• You act like an owner. You are action oriented, thriving when you're empowered to take initiative, go above and beyond, and deliver results. 

• You have a passion for excellence, holding yourself and others accountable.

• You give meaning to data. You are comfortable with ambiguity and enjoy investigating comp