Director - Governance and Control

Canadian Imperial Bank of Commerce•New York, NY

4d•Hybrid

About The Position

We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients. At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute. To learn more about CIBC, please visit CIBC.com What You’ll Be Doing: The US Business Management group provides direct day-to-day support for CIBC’s US Capital Markets business, primarily Sales and Trading, Debt Capital Markets and Corporate and Investment Banking. The group’s primary role is to assist in achieving the mandate to be a premier client-focused global bank. The Business Management Risks and Controls team (the Team) is responsible for managing governance and controls for the US Capital Markets. It serves as the primary liaison between all Capital Markets Front Office teams, and the Infrastructure and Risk/ Compliance Partners. The Team supports the Capital Markets Front Office businesses identify, catalogue and test all risks and controls for existing and new products. US Business Management strives to ensure a sound control environment and provides support the execution of business strategy. This role is responsible for providing assessment, consulting, and reporting on a comprehensive inventory of operating risk and controls involving people, technology, processes or external events that arise from audit and control testing. The role applies advanced concepts to provide guidance to lines of business during the risk assessment process to identify and evaluate risks and controls according to operational risk standards, policies and procedures. The role is accountable for the implementation, maintenance and adherence of governance and control initiatives, programs, and processes. The incumbent may also be required to participate in initiatives, project and committees as assigned. The role will make decisions that influence department plans, regularly recommending new processes/ controls to develop the appropriate risk treatment for all identified, open issues. The role uses independent judgement to determine methods and approaches to work, monitoring and reviewing operational risks identified during audits.

Requirements

Highly motivated, self-starter and able to work in a fast paced, results driven environment.
Minimum 7–10 years of industry-related experience, preferably in the financial services industry, or accounting, consulting and finance backgrounds, and strong understanding of the Capital Markets products and services.
Demonstrated ability to effectively communicate with business partners augmented with strong interpersonal, written, verbal and presentation skills
Excellent organizational skills with a good attention to detail.
Ability to execute tasks under aggressive targets and effectively manage to changes in plan.
Strong knowledge of Microsoft applications (i.e., Microsoft Office, including PowerPoint, Excel, Visio).

Nice To Haves

Knowledge of any programming and AI tools is not required but preferred.

Responsibilities

Independently plan, coordinate, and conduct the full RCSA lifecycle, including risk identification, cause analysis, control identification, evaluation, documentation, and validation of control effectiveness.
Ensure all RCSA processes are robust, accurately reflect business risks, and are completed in accordance with internal standards.
Facilitate workshops with process/ control owners, gather evidence, assess residual risks, and ensure timely completion and reporting of RCSA results.
Prepare, working with Business Managers and Business, detailed process maps to document workflows, controls, and risk points for each business covered in the RCSA.
Provide businesses with advice regarding development of their Policies and Procedures, project plans, business requirements, executive presentation materials and training materials.
Participation in ad-hoc business and CIBC-wide projects and committees, as required.
Identify missing controls and/or gaps and weaknesses in existing controls and recommend corrective actions to mitigate the mapped risks.
Advising businesses on the implementation and monitoring of Business-Managed Technology controls.
Organize, lead, and facilitate meetings with stakeholders across business units and support functions to discuss risk and controls, findings, improvements, and action plans.
Compile reports summarizing assessment results, key findings, and recommendations and present these to business management and other stakeholders.
Track the implementation of agreed-upon remediation actions, ensuring timely completion and reporting on progress.
Stay abreast of relevant regulations and industry best practices, ensuring all risk and control activities comply with internal policies and consider external intelligence.
Support development and annual review/recalibration of line of business specific risk appetite/segment risk statements/product risk statements with a focus on emerging enterprise, credit, market, operational and strategic risks.
Liaise on a regular basis with individuals in the other CIBC LOBs and Capital Markets infrastructure partners (i.e. Finance, Operations, Technology, Risk Management, Compliance, Privacy, Audit), regarding CIBC’s governance and control initiatives and programs.
Communicating with policy and program owners when providing data analysis and reports to support policy and program review.
Champion initiatives to enhance data requirements, risk management and control processes, leveraging data and feedback to drive ongoing improvements.
Work with Governance & Controls team to respond to attestations, management and board threshold breaches (e.g., root cause analysis, action plan and timelines to address) and facilitate feeding into Risk dashboard.
Act as a subject matter expert in RCSA process, provide guidance and training to team members and other stakeholders as needed.
Build and maintain working relationships with stakeholders across the different businesses our team supports.
Manage an effective and documented internal control structure, by maintaining desk policies and procedures as well as adherence to, and successful testing of, internal controls and logical access reviews; maintain, support and enhance the information risk policies, standards, guidelines, processes and metrics.
Coordinate information and data responses to internal and external auditor / regulator requests.
Be responsive and accessible to the business throughout the day; be proactive in response to information requests and promptly resolve any day-to-day service or business related issues.