US Region Cybersecurity Platform Service Governance Owner

We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients.
At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute.
To learn more about CIBC, please visit CIBC.com
Job SummaryAs a member of the US Security Services team, you will work in a fast-paced information security environment focused on protecting the bank from cyber threats and strengthening the overall security, risk, and compliance posture of the U.S. region.
The US Region Cybersecurity Platform Service Governance Owner is responsible for the leadership, governance, management, and execution of CIBC’s cybersecurity platform services across the U.S. region, with accountability for application, cloud, endpoint, and network security. This role provides governance oversight for multiple security capabilities that support critical cybersecurity, risk management, compliance, and control objectives. The role is accountable for establishing the service vision and strategy, driving customer advocacy, and overseeing the roadmap, prioritization, and feature development required to maintain effective, resilient, and business-aligned security services.
This position also serves as a key governance lead to ensure alignment with enterprise security standards, regulatory requirements, risk management frameworks, control expectations, and audit requirements. In addition, the role is responsible for reviewing AI-related capabilities, use cases, and initiatives and making recommendations to support appropriate governance, secure design, regulatory compliance, risk mitigation, and responsible implementation.
At CIBC, we enable the work environment most optimal for you to thrive in your role. To successfully perform the work, you will work in a hybrid environment.Key ResponsibilitiesGovernance, Risk, and Compliance
Provide governance oversight for U.S. Region cybersecurity platform services across application, cloud, endpoint, and network security.
Ensure services are aligned with enterprise governance standards, regulatory obligations, risk management frameworks, control requirements, and audit expectations.
Drive strong service accountability, control oversight, and operational discipline across the cybersecurity platform portfolio.
Support audit readiness, regulatory reviews, issue remediation, and continuous improvement in control effectiveness.
Promote consistent, transparent, and risk-informed governance practices across supported services.
Service Vision, Strategy, and Roadmap
Define and maintain the service vision, strategy, and roadmap for cybersecurity platform services supporting the U.S. region.
Ensure roadmap priorities align with business needs, security objectives, regulatory expectations, and enterprise direction.
Oversee feature development and capability enhancement to ensure services remain effective, resilient, and responsive to evolving threats.
Act as an advocate for customers and stakeholders by incorporating feedback into service planning, prioritization, and continuous improvement.
Maintain visibility into service performance, maturity, dependencies, and strategic opportunities across the portfolio.
Platform Service Oversight
Provide oversight for multiple cybersecurity capabilities that are critical to protecting the technology environment and reducing cyber risk.
Govern prioritization and decision-making for service enhancements, control improvements, and operational requirements.
Establish and maintain clear accountability for service ownership, governance routines, metrics, and escalation paths.
Develop and report on relevant service metrics, KPIs, risk indicators, and control effectiveness measures.
Maintain service documentation, governance artifacts, and service catalog information as required.
Technology, Regulatory, and Third-Party Partnership
Collaborate with US and Enterprise Security Service Owners, technology teams, risk partners, compliance partners, and business stakeholders to ensure U.S. Region requirements are represented and addressed.
Influence enterprise roadmaps and service strategies to support U.S. Region priorities and regulatory needs.
Participate in planning activities with enterprise teams and ensure services provided to the U.S. region have appropriate governance, service clarity, and accountability.
Ensure effective coordination across stakeholders for service transitions, enhancements, and issue resolution.
Ensure services delivered through Enterprise Security Services or third parties are governed appropriately and remain aligned to U.S. Region requirements.
Confirm that required RACI, service expectations, and performance measures are defined, monitored, and reviewed regularly.
Support adherence to applicable U.S. regulatory requirements, including oversight of Reg W considerations where relevant.
Follow Third Party Risk Management (TPRM) processes and best practices to support third-party governance, contract renewals, and ongoing service accountability.
Emerging Technology Governance and Recommendations
Review AI-related capabilities, use cases, and initiatives within the cybersecurity platform service portfolio.
Make recommendations to support appropriate governance, secure adoption, risk mitigation, regulatory compliance, and responsible implementation of AI-related solutions.
Assess emerging technology such as AI and Quantum related proposals through a risk, control, compliance, and operational effectiveness lens.
Partner with enterprise stakeholders to help ensure emerging technology activities align with internal governance standards and evolving regulatory expectations.
QualificationsRequired Qualifications
Demonstrated experience in cybersecurity, information security, technology risk, or security service management.
Experience providing governance or oversight across one or more of the following domains: application, cloud, endpoint, or network security.
Strong understanding of risk management, control frameworks, regulatory expectations, audit processes, and compliance requirements.
Experience defining or managing service strategies, roadmaps, prioritization, and operational governance.
Ability to work effectively across a complex organization and influence stakeholders across technology, risk, compliance, and business teams.
Strong written and verbal communication skills, with the ability to present clearly to both technical and non-technical stakeholders.
Proven ability to manage competing priorities in a fast-paced environment.
Preferred Qualifications
Experience working within the financial services industry or another highly regulated environment.
Familiarity with U.S. regulatory expectations relevant to cybersecurity and technology risk.
Experience working with Enterprise Security Services, shared service models, or third-party security service providers.
Understanding of emerging technology including but not limited to AI governance, emerging AI risk considerations, and responsible technology adoption practices.
Experience supporting audit readiness, issue remediation, and control maturity improvement initiatives.
Knowledge, Skills, and Expe