US Region Cybersecurity Platform Service Governance Owner

About this role

We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients.

At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute.

To learn more about CIBC, please visit CIBC.com

Job Summary As a member of the US Security Services team, you will work in a fast-paced information security environment focused on protecting the bank from cyber threats and strengthening the overall security, risk, and compliance posture of the U.S. region.

The US Region Cybersecurity Platform Service Governance Owner is responsible for the leadership, governance, management, and execution of CIBC’s cybersecurity platform services across the U.S. region, with accountability for application, cloud, endpoint, and network security. This role provides governance oversight for multiple security capabilities that support critical cybersecurity, risk management, compliance, and control objectives. The role is accountable for establishing the service vision and strategy, driving customer advocacy, and overseeing the roadmap, prioritization, and feature development required to maintain effective, resilient, and business-aligned security services.

This position also serves as a key governance lead to ensure alignment with enterprise security standards, regulatory requirements, risk management frameworks, control expectations, and audit requirements. In addition, the role is responsible for reviewing AI-related capabilities, use cases, and initiatives and making recommendations to support appropriate governance, secure design, regulatory compliance, risk mitigation, and responsible implementation.

At CIBC, we enable the work environment most optimal for you to thrive in your role. To successfully perform the work, you will work in a hybrid environment. Key Responsibilities Governance, Risk, and Compliance • Provide governance oversight for U.S. Region cybersecurity platform services across application, cloud, endpoint, and network security.

• Ensure services are aligned with enterprise governance standards, regulatory obligations, risk management frameworks, control requirements, and audit expectations.

• Drive strong service accountability, control oversight, and operational discipline across the cybersecurity platform portfolio.

• Support audit readiness, regulatory reviews, issue remediation, and continuous improvement in control effectiveness.

• Promote consistent, transparent, and risk-informed governance practices across supported services.

Service Vision, Strategy, and Roadmap • Define and maintain the service vision, strategy, and roadmap for cybersecurity platform services supporting the U.S. region.

• Ensure roadmap priorities align with business needs, security objectives, regulatory expectations, and enterprise direction.

• Oversee feature development and capability enhancement to ensure services remain effective, resilient, and responsive to evolving threats.

• Act as an advocate for customers and stakeholders by incorporating feedback into service planning, prioritization, and continuous improvement.

• Maintain visibility into service performance, maturity, dependencies, and strategic opportunities across the portfolio.

Platform Service Oversight • Provide oversight for multiple cybersecurity capabilities that are critical to protecting the technology environment and reducing cyber risk.

• Govern prioritization and decision-making for service enhancements, control improvements, and operational requirements.

• Establish and maintain clear accountability for service ownership, governance routines, metrics, and escalation paths.

• Develop and report on relevant service metrics, KPIs, risk indicators, and control effectiveness measures.

• Maintain service documentation, governance artifacts, and service catalog information as required.

Technology, Regulatory, and Third-Party Partnership • Collaborate with US and Enterprise Security Service Owners, technology teams, risk partners, compliance partners, and business stakeholders to ensure U.S. Region requirements are represented and addressed.

• Influence enterprise roadmaps and service strategies to support U.S. Region priorities and regulatory needs.

• Participate in planning activities with enterprise teams and ensure services provided to the U.S. region have appropriate governance, service clarity, and accountability.

• Ensure effective coordination across stakeholders for service transitions, enhancements, and issue resolution.

• Ensure services delivered through Enterprise Security Services or third parties are governed appropriately and remain aligned to U.S. Region requirements.

• Confirm that required RACI, service expectations, and performance measures are defined, monitored, and reviewed regularly.

• Support adherence to applicable U.S. regulatory requirements, including oversight of Reg W considerations where relevant.

• Follow Third Party Risk Management (TPRM) processes and best practices to support third-party governance, contract renewals, and ongoing service accountability.

Emerging Technology Governance and Recommendations • Review AI-related capabilities, use cases, and initiatives within the cybersecurity platform service portfolio.

• Make recommendations to support appropriate governance, secure adoption, risk mitigation, regulatory compliance, and responsible implementation of AI-related solutions.

• Assess emerging technology such as AI and Quantum related proposals through a risk, control, compliance, and operational effectiveness lens.

• Partner with enterprise stakeholders to help ensure emerging technology activities align with internal governance standards and evolving regulatory expectations.

Qualifications Required Qualifications • Demonstrated experience in

Similar jobs

• Cybersecurity Governance Manager — OneMain Financial · Baltimore, MD
• VP, Technology & Cybersecurity Governance — LPL Financial · Fort Mill/Charlotte | San Diego, CA
• Global Product Cybersecurity Supervisor — BorgWarner · Auburn Hills, Michigan, United States
• Director, Global Cybersecurity - Governance, Risk, Compliance & Identity — Donaldson · Bloomington, MN (USA)
• Manager, Cybersecurity GRC, Global — Vantagedc · Denver, Colorado
• Director, Cybersecurity Operations and Platform Delivery — Dyopath · Remote
• Senior Engineer, Global Cybersecurity Governance, Risk and Compliance — Donaldson · Bloomington, MN (USA)
• Cybersecurity GRC Manager — Luriechildrens · Streeterville, Chicago, IL