US Region Cybersecurity Platform Service Governance Owner

CIBC•Chicago, IL

6d•$170,000 - $195,000•Hybrid

About The Position

As a member of the US Security Services team, you will work in a fast-paced information security environment focused on protecting the bank from cyber threats and strengthening the overall security, risk, and compliance posture of the U.S. region. The US Region Cybersecurity Platform Service Governance Owner is responsible for the leadership, governance, management, and execution of CIBC’s cybersecurity platform services across the U.S. region, with accountability for application, cloud, endpoint, and network security. This role provides governance oversight for multiple security capabilities that support critical cybersecurity, risk management, compliance, and control objectives. The role is accountable for establishing the service vision and strategy, driving customer advocacy, and overseeing the roadmap, prioritization, and feature development required to maintain effective, resilient, and business-aligned security services. This position also serves as a key governance lead to ensure alignment with enterprise security standards, regulatory requirements, risk management frameworks, control expectations, and audit requirements. In addition, the role is responsible for reviewing AI-related capabilities, use cases, and initiatives and making recommendations to support appropriate governance, secure design, regulatory compliance, and risk mitigation, and responsible implementation. At CIBC, we enable the work environment most optimal for you to thrive in your role. To successfully perform the work, you will work in a hybrid environment.

Requirements

Demonstrated experience in cybersecurity, information security, technology risk, or security service management.
Experience providing governance or oversight across one or more of the following domains: application, cloud, endpoint, or network security.
Strong understanding of risk management, control frameworks, regulatory expectations, audit processes, and compliance requirements.
Experience defining or managing service strategies, roadmaps, prioritization, and operational governance.
Ability to work effectively across a complex organization and influence stakeholders across technology, risk, compliance, and business teams.
Strong written and verbal communication skills, with the ability to present clearly to both technical and non-technical stakeholders.
Proven ability to manage competing priorities in a fast-paced environment.
Accountability
Cybersecurity
Information Security
Leadership
Regulatory Compliance
Risk Management

Nice To Haves

Experience working within the financial services industry or another highly regulated environment.
Familiarity with U.S. regulatory expectations relevant to cybersecurity and technology risk.
Experience working with Enterprise Security Services, shared service models, or third-party security service providers.
Understanding of emerging technology including but not limited to AI governance, emerging AI risk considerations, and responsible technology adoption practices.
Experience supporting audit readiness, issue remediation, and control maturity improvement initiatives.
Strong knowledge of cybersecurity governance and service management practices.
Ability to translate business, regulatory, and risk requirements into practical service priorities and governance actions.
Knowledge of security controls, technology risk management, and operational resilience concepts.
Strong stakeholder management and partnership skills.
Ability to develop, track, and report on KPIs, KRIs, SLAs, and control effectiveness measures.
Strong analytical, problem-solving, and decision-making skills.
Ability to identify risks, escalate issues appropriately, and drive resolution through partnership and governance.

Responsibilities

Provide governance oversight for U.S. Region cybersecurity platform services across application, cloud, endpoint, and network security.
Ensure services are aligned with enterprise governance standards, regulatory obligations, risk management frameworks, control requirements, and audit expectations.
Drive strong service accountability, control oversight, and operational discipline across the cybersecurity platform portfolio.
Support audit readiness, regulatory reviews, issue remediation, and continuous improvement in control effectiveness.
Promote consistent, transparent, and risk-informed governance practices across supported services.
Define and maintain the service vision, strategy, and roadmap for cybersecurity platform services supporting the U.S. region.
Ensure roadmap priorities align with business needs, security objectives, regulatory expectations, and enterprise direction.
Oversee feature development and capability enhancement to ensure services remain effective, resilient, and responsive to evolving threats.
Act as an advocate for customers and stakeholders by incorporating feedback into service planning, prioritization, and continuous improvement.
Maintain visibility into service performance, maturity, dependencies, and strategic opportunities across the portfolio.
Provide oversight for multiple cybersecurity capabilities that are critical to protecting the technology environment and reducing cyber risk.
Govern prioritization and decision-making for service enhancements, control improvements, and operational requirements.
Establish and maintain clear accountability for service ownership, governance routines, metrics, and escalation paths.
Develop and report on relevant service metrics, KPIs, risk indicators, and control effectiveness measures.
Maintain service documentation, governance artifacts, and service catalog information as required.
Collaborate with US and Enterprise Security Service Owners, technology teams, risk partners, compliance partners, and business stakeholders to ensure U.S. Region requirements are represented and addressed.
Influence enterprise roadmaps and service strategies to support U.S. Region priorities and regulatory needs.
Participate in planning activities with enterprise teams and ensure services provided to the U.S. region have appropriate governance, service clarity, and accountability.
Ensure effective coordination across stakeholders for service transitions, enhancements, and issue resolution.
Ensure services delivered through Enterprise Security Services or third parties are governed appropriately and remain aligned to U.S. Region requirements.
Confirm that required RACI, service expectations, and performance measures are defined, monitored, and reviewed regularly.
Support adherence to applicable U.S. regulatory requirements, including oversight of Reg W considerations where relevant.
Follow Third Party Risk Management (TPRM) processes and best practices to support third-party governance, contract renewals, and ongoing service accountability.
Review AI-related capabilities, use cases, and initiatives within the cybersecurity platform service portfolio.
Make recommendations to support appropriate governance, secure adoption, risk mitigation, regulatory compliance, and responsible implementation of AI-related solutions.
Assess emerging technology such as AI and Quantum related proposals through a risk, control, compliance, and operational effectiveness lens.
Partner with enterprise stakeholders to help ensure emerging technology activities align with internal governance standards and evolving regulatory expectations.