We’re building a relationship-oriented bank for the modern world. ComWhat you’ll be doing The Third-Party Risk Management team helps CIBC manage supplier risk across the enterprise by providing oversight, governance, and ongoing monitoring of third-party relationships. As a Director, Information Security, Ongoing Monitoring, you’ll lead a team responsible for building and delivering capabilities that monitor the risk profile of CIBC’s existing supplier relationships on an ongoing basis.
You’ll work closely with third‑party risk management lifecycle partners and key stakeholders, including pre‑contract due diligence teams, control groups, and vendor relationship managers, to help ensure supplier risk remains within CIBC’s risk tolerance. In this senior leadership role, you’ll define and execute a risk‑based supplier monitoring program that aligns with CIBC policy and global regulatory requirements, while supporting consistent governance across lines of business. You’ll also act as a key advisor on supplier risk, remediation, regulatory matters, and program improvements, while coaching and developing your team.
You’ll have the flexibility to manage your work activities within a hybrid work arrangement where you’ll spend 1-3 days per week on‑site, while other days will be remote. Lead ongoing monitoring – Define and deliver a risk‑based ongoing supplier risk monitoring program that aligns with CIBC policies, regulatory requirements, and enterprise risk tolerance. Maintain supporting processes and procedure documentation to ensure consistency and effectiveness.
Strengthen enterprise governance – Partner with lines of business and vendor relationship managers to support appropriate governance and oversight of third‑party services. Provide direction and operational support to help teams effectively manage supplier relationships and monitor contract adherence. Maintain supplier risk insights – Oversee supplier risk profiles across the enterprise and maintain a global risk tiering approach for suppliers and arrangements.
Support remediation and regulatory readiness – Execute supplier risk assessments, partner with business units to develop remediation plans, and track issues through to resolution. Act as a point of contact for control testing, audit activity, and regulatory inquiries related to ongoing monitoring. Work to harmonize regulatory expectations into a consistent enterprise approach and continuously improve the program based on industry trends and business needs.
Who you are You can demonstrate 5 years of experience in third‑party risk management, supplier risk monitoring, information security oversight, vendor governance, and working within a large, regulated environment. You have knowledge of risk management practices, supplier evaluation, and the broader information technology workplace.
It’s an asset if you have experience interpreting global third‑party risk regulations and working across multiple jurisdictions.
You have experience coaching employees and inspiring successful team performance. You know that relationships and networks are essential to success. You give meaning to data. competitive salary defined benefit pension plan* a vacation offering wellbeing support MomentMakers, our social, points‑based recognition program *All roles posted are opportunities we’re actively recruiting for, unless stated otherwise.
You need to be legally eligible to work at the location(s) specified above and, where applicable, must have a valid work or study permit. We may ask you to complete an attribute‑based assessment and other skills test (such as simulation, coding, French proficiency). We use artificial intelligence tools during the recruitment process.
Skills Collaboration, Communication, People Management, Regulatory Requirements, Risk Management, Risk Monitoring, Team Performance, Third Party Risk Management At CIBC, we are in business to help our clients, employees and shareholders achieve what is important to them. Our ability to create value for all CIBC stakeholders is driven by a business culture based on common values: Working with CIBC makes you a part of a work environment committed to our clients, employees and communities - a place where you can excel. Every day, our 48,000 employees help our clients achieve their financial goals, because what matters to our clients, matters to us. #
📌 Director, Information Security, Ongoing Monitoring (Toronto)
🏢 CIBC
📍 Toronto