Director, Governance & Controls – Information Technology & Information Security

We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients.

At CIBC, we embrace your strengths and your ambitions, so you are empowered  team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute.

To learn more about CIBC, please visit

CIBC’s Technology Infrastructure and Innovation (TI&I) business spans Technology, Information Security, Deposit Operations, Loan Operations, Payment Operations, Data Management Office, Corporate Real Estate, Corporate Security, Procurement, Operational Resilience, and Risk & Governance. TI&I drives operational excellence by managing the technology and operations required to run the bank, enabling transformation through innovation, and supporting growth objectives with flawless execution of strategic initiatives.

The Governance and Oversight team within TI&I operates as a First Line team in the Three Lines of Defense model, enabling risk discipline, business resiliency, and value creation while strengthening the CIBC Risk Management Framework.

As Director, Governance & Controls, you will be a key leader within the US TI&I organization, reporting to the Head of Governance & Oversight. You will be responsible for designing, implementing, and continuously enhancing governance, risk, and control frameworks for our US Technology and Information Security (IT/IS) functions. This role is integral to maintaining a robust risk culture, ensuring regulatory compliance, and driving operational resilience in a complex, fast-paced environment.

At CIBC we enable the work environment most optimal for you to thrive in your role. Details on your work arrangement (proportion of on-site and remote work) will be discussed at the time of your interview

• Governance, Risk & Controls (GRC): Proactively identify, assess, and manage risks, ensuring controls are designed and implemented to mitigate those risks effectively. Maintain a forward-looking view of the control environment, staying informed on regulatory changes, emerging risks, and industry best practices.

• Advisory & Thought Leadership: Provide expert guidance to IS / IT teams on risk management, control design, and compliance. Act as a thought leader, applying advanced concepts to drive control maturity and alignment with operational risk standards.

• Continuous improvement – Inspire a culture of continuous improvement by leveraging leadership behaviors, innovative methods, and enabling technologies. Drive initiatives that enhance the efficiency, effectiveness, and sustainability of the control environment.

• Communication – Exhibit strong verbal and written communication skills. Deliver insights and recommendations in a manner that resonates with diverse audiences, including senior leadership, regulators, and external stakeholders. Translate complex data and findings into actionable insights that drive decision‑making.

• Business Acumen – Demonstrate a strong understanding of control frameworks, regulations, management control environments, audit, corporate policies and standards, business processes, and new industry‑level guidance.

• Relationship Building – Build trust and credibility with stakeholders by demonstrating expertise, authenticity, and a collaborative approach. Foster an inclusive and collaborative environment that drives collective success.

• Collaboration & Partnership – Establish and maintain a strong operating/engagement model with the IS/IT organization, 2
  
  LOD, 3
  
  LOD, and Enterprise partners as the foundation to a strong collaborative partnership with clearly defined roles and responsibilities.

• You are an experienced risk leader with a minimum of 10 years of progressive experience in technology risk management, cybersecurity, or controls implementation within a large, complex financial institution (GSIB experience preferred). You have a proven track record of developing, leading, and executing GRC strategies in a technology‑driven environment.

• You are a regulatory and industry expert with deep knowledge of US and…