Director, Technology Operational Risk

CIBC•Toronto, ON

2d•Hybrid

About The Position

In this second line of defense risk management role, you will provide oversight over the identification, measurement, mitigation and monitoring of technology risk and ensure that CIBC continues to meets the key requirements of the Sound Practices for the Management and Supervision of Operational Risk. In this capacity, the Director will work in closely with technology and risk partners across the company to ensure a consistent and collaborative approach to managing technology risk. At CIBC we enable the work environment most optimal for you to thrive in your role. You’ll have the flexibility to manage your work activities within a hybrid work arrangement where you’ll spend 1-3 days per week on-site, while other days will be remote.

Requirements

Breadth of experience IT service management, technology governance and associated industry frameworks and regulations.
Technical experience in areas such as cloud computing, containerization, IT service management, and development practices (DevOps, Agile).
Accountable for producing content for senior management on technical subject matter.
Understanding that success is in the details.
Critical thinking skills help to inform decision making.
Ability to give meaning to data.
Enjoy investigating complex problems, and making sense of information.
Confident in ability to synthesize detailed information and communicate insights and conclusions in an impactful way.
Passionate about people.
Find meaning in relationships and surround yourself with a diverse network of partners.
Build trust through respect and authenticity.
Embrace and champion change.
Continuously evolve thinking and the way you work in order to deliver your best.
Values matter.
Bring your real self to work and live our values – trust, teamwork and accountability.

Nice To Haves

Technical experience in areas such as cloud computing, containerization, IT service management, and development practices (DevOps, Agile).
Industry recognized technology certifications such as ITIL, CISM, CISSP are not mandatory but are considered assets.

Responsibilities

Provide oversight over the identification, measurement, mitigation and monitoring of technology risk.
Ensure that CIBC continues to meet the key requirements of the Sound Practices for the Management and Supervision of Operational Risk.
Work closely with technology and risk partners across the company to ensure a consistent and collaborative approach to managing technology risk.
Develop and deliver strong reporting content, presentations and assessment summaries on an ongoing basis for senior audiences and risk committees up to and including the Board.
Build and sustain strong internal relationships where you are viewed as a valued partner that offers sound and pragmatic guidance, demonstrates a deep understanding their environment and context and facilitates productive risk discussions and outcomes.
Closely track status of key technology risk initiatives and programs to clearly understand, challenge and influence program objectives to ensure objectives are met and risk is reduced.
Review operational practices, risk assessments, controls, deficiencies, metrics, and other relevant information to form an independent view of technology risks and perform effective challenge.
Leverage a risk-based approach to understand and manage risk of technology-related activities to ensure alignment to operational risk management policies and framework and CIBC risk appetite.
Leverage strong data and analytical skills to perform detailed research to produce risk insights on current and emerging technologies for distribution to various internal audiences.
Generate impactful and insightful risk reporting to be presented to senior leaders within CIBC.
Maintain an industry view of the broad technology landscape, understand best practices, regulations and performance benchmarks, monitor emerging technology trends and threats and interface with peers and thought leaders to define and influence technology risk policies and standards.
Ensure that roles and responsibilities for the three lines of defense for technology risk are clear.
Develop materials to communicate technology risk status, accomplishments, trends and issues to senior audiences through various forums such as senior management meetings and risk committees.

Benefits

Competitive salary
Incentive pay
Banking benefits
Benefits program
Defined benefit pension plan
Employee share purchase plan
Vacation offering
Wellbeing support
MomentMakers, our social, points-based recognition program
Purpose Day; a paid day off dedicated for you to use to invest in your growth and development