Cybersecurity Platform Service Governance Owner

We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients.

At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute.

To learn more about CIBC, please visit CIBC.com

Job Summary

As a member of the US Security Services team, you will work in a fast-paced information security environment focused on protecting the bank from cyber threats and strengthening the overall security, risk, and compliance posture of the U.S. region.

The US Region Cybersecurity Platform Service Governance Owner is responsible for the leadership, governance, management, and execution of CIBC’s cybersecurity platform services across the U.S. region, with accountability for application, cloud, endpoint, and network security. This role provides governance oversight for multiple security capabilities that support critical cybersecurity, risk management, compliance, and control objectives. The role is accountable for establishing the service vision and strategy, driving customer advocacy, and overseeing the roadmap, prioritization, and feature development required to maintain effective, resilient, and business-aligned security services.

This position also serves as a key governance lead to ensure alignment with enterprise security standards, regulatory requirements, risk management frameworks, control expectations, and audit requirements. In addition, the role is responsible for reviewing AI-related capabilities, use cases, and initiatives and making recommendations to support appropriate governance, secure design, regulatory compliance, risk mitigation, and responsible implementation.

At CIBC, we enable the work environment most optimal for you to thrive in your role. To successfully perform the work, you will work in a hybrid environment.

Key Responsibilities

Governance, Risk, and Compliance

• Provide governance oversight for U.S. Region cybersecurity platform services across application, cloud, endpoint, and network security.

• Ensure services are aligned with enterprise governance standards, regulatory obligations, risk management frameworks, control requirements, and audit expectations.

• Drive strong service accountability, control oversight, and operational discipline across the cybersecurity platform portfolio.

• Support audit readiness, regulatory reviews, issue remediation, and continuous improvement in control effectiveness.

• Promote consistent, transparent, and risk-informed governance practices across supported services.

Service Vision, Strategy, and Roadmap

• Define and maintain the service vision, strategy, and roadmap for cybersecurity platform services supporting the U.S. region.

• Ensure roadmap priorities align with business needs, security objectives, regulatory expectations, and enterprise direction.

• Oversee feature development and capability enhancement to ensure services remain effective, resilient, and responsive to evolving threats.

• Act as an advocate for customers and stakeholders by incorporating feedback into service planning, prioritization, and continuous improvement.

• Maintain visibility into service performance, maturity, dependencies, and strategic opportunities across the portfolio.

Platform Service Oversight

• Provide oversight for multiple cybersecurity capabilities that are critical to protecting the technology environment and reducing cyber risk.

• Govern prioritization and decision-making for service enhancements, control improvements, and operational requirements.

• Establish and maintain clear accountability for service ownership, governance routines, metrics, and escalation paths.

• Develop and report on relevant service metrics, KPIs, risk indicators, and control effectiveness measures.

• Maintain service documentation, governance artifacts, and service catalog information as required.

Technology, Regulatory, and Third-Party Partnership

• Collaborate with US and Enterprise Security Service Owners, technology teams, risk partners, compliance partners, and business stakeholders to ensure U.S. Region requirements are represented and addressed.

• Influence enterprise roadmaps and service strategies to support U.S. Region priorities and regulatory needs.

• Participate in planning activities with enterprise teams and ensure services provided to the U.S. region have appropriate governance, service clarity, and accountability.

• Ensure effective coordination across stakeholders for service transitions, enhancements, and issue resolution.

• Ensure services delivered through Enterprise Security Services or third parties are governed appropriately and remain aligned to U.S. Region requirements.

• Confirm that required RACI, service expectations, and performance measures are defined, monitored, and reviewed regularly.

• Support adherence to applicable U.S. regulatory requirements, including oversight of Reg W considerations where relevant.

• Follow Third Party Risk Management (TPRM) processes and best practices to support third-party governance, contract renewals, and ongoing service accountability.

Emerging Technology Governance and Recommendations

• Review AI-related capabilities, use cases, and initiatives within the cybersecurity platform service portfolio.

• Make recommendations to support appropriate governance, secure adoption, risk mitigation, regulatory compliance, and responsible implementation of AI-related solutions.

• Assess emerging technology such as AI and Quantum related proposals through a risk, control, compliance, and operational effectiveness lens.

• Partner with enterprise stakeholders to help ensure emerging technology activities align with internal governance standards and evolving regulatory expectations.

Qualifications

Required Qualifications

• Demonstrated experience in cybersecurity, information security, technology risk, or security service management.

• Experience providing governance or oversight across one or more of the following domains: application, cloud, endpoint, or network security.

• Strong understanding of risk management, control frameworks, regulatory expectations, audit processes, and compliance requirements.

• Experience defining or managing service strategies, roadmaps, prioritization, and operational governance.

• Ability to work effectively across a complex organization and influence stakeholders across technology, risk, compliance, and business teams.

• Strong written and verbal communication skills, with the ability to present clearly to both technical and non-technical stakeholders.

• Proven ability to manage competing priorities in a fast-paced environment.

Preferred Qualifications

• Experience working within the financial services industry or another highly regulated environment.

• Familiarity with U.S. regulatory expectations relevant to cybersecurity and technology risk.

• Experience working with Enterprise Security Services, shared service models, or third-party security service providers.

• Understanding of emerging technology including but not limited to AI governance, emerging AI risk considerations, and responsible technology adoption practices.

• Experience supporting audit readiness, issue remediation, and control maturity improvement initiatives.

Knowledge, Skills, and Experience

• Strong knowledge of cybersecurity governance and service management practices.

• Ability to translate business, regulatory, and risk requirements into practical service priorities and governance actions.

• Knowledge of security controls, technology risk management, and operational resilience concepts.

• Strong stakeholder management and partnership skills.

• Ability to develop, track, and report on KPIs, KRIs, SLAs, and control effectiveness measures.

• Strong analytical, problem-solving, and decision-making skills.

• Ability to identify risks, escalate issues appropriately, and drive resolution through partnership and governance.

Success Measures

Success in this role will be demonstrated by:

• Strong governance and accountability across U.S. Region cybersecurity platform services.

• Improved alignment with enterprise standards, regulatory expectations, and audit requirements.

• Effective oversight of service roadmaps, prioritization, and feature delivery.

• Clear and timely reporting on service performance, risk indicators, and control effectiveness.

• Strong partnership with enterprise teams, risk and compliance functions, and business stakeholders.

• Improved audit readiness and support for remediation of identified issues.

• Effective review and recommendation of AI-related initiatives to support secure, compliant, and responsible adoption.

At CIBC, we offer a competitive total rewards package. This role has an expected salary range of $170,000.00 - $195,000.00 for the CHICAGO market based on experience, qualifications, and location of the position. Canadian Salary Range will be different. The successful candidate may be eligible to participate in the relevant business unit’s incentive compensation plan, which may also include a discretionary bonus component. CIBC offers a full range of benefits and programs to meet our employee’s needs; including Medical, Dental, Vision, Health Savings Account, Life Insurance, Disability, and Other Insurance Plans, Paid Time Off (including Sick Leave, Parental Leave and Vacation), Holidays and 401(k), in addition to other special perks reserved for our team members.

Work Environment: Hybrid, 3 days in office, 2 days remote

What CIBC Offers

At CIBC, your goals are a priority. We start with your strengths and ambitions as an employee and strive to create opportunities to tap into your potential. We aspire to give you a career, rather than just a paycheck.

• We work to recognize you in meaningful, personalized ways including a competitive salary, incentive pay, banking benefits, a benefits program*, a vacation offering, wellbeing support, and MomentMakers, our social, points-based recognition program.

• Our spaces and technological toolkit will make it simple to bring together great minds to create innovative solutions that make a difference for our clients.

• We cultivate a culture where you can express your ambition through initiatives like Purpose Day; a paid day off dedicated for you to use to invest in your growth and development.

*Subject to plan and program terms and conditions

What you need to know

• CIBC is committed to creating an inclusive environment where all team members and clients feel like they belong. We seek applicants with a wide range of abilities and we provide an accessible candidate experience. If you need accommodation, please contact [email protected]

• You need to be legally eligible to work at the location(s) specified above and, where applicable, must have a valid work or study permit.

• We may ask you to complete an attribute-based assessment and other skills tests (such as simulation, coding, MS Office). Our goal for the application process is to get to know more about you, all that you have to offer, and give you the opportunity to learn more about us.

Job Location

IL-Chicago, 70 W Madison St Fl 9

Employment Type

Regular

Weekly Hours

40

Skills

Accountability, Cybersecurity, Information Security, Leadership, Regulatory Compliance, Risk Management