US Region Cybersecurity Platform Service Governance Owner (AI Governance)

Location: Chicago, IL; hybrid work with 3 days in office and 2 days remote. Candidates must be legally eligible to work at the specified location and, where applicable, hold a valid work or study permit.

Salary: $170,000–$195,000 annually for the Chicago market, based on experience, qualifications, and location. Eligibility for incentive compensation, including a discretionary bonus, may apply.

Company

CIBC is a relationship-oriented bank focused on serving clients and strengthening its U.S. financial services operations.

What you will do

• Provide governance oversight for U.S. Region cybersecurity platform services across application, cloud, endpoint, and network security.
• Define service vision, strategy, roadmaps, prioritization, feature development, governance routines, accountability, and escalation paths.
• Align services with enterprise standards, U.S. regulatory obligations, risk frameworks, control requirements, audit expectations, and operational resilience objectives.
• Track and report service metrics, KPIs, KRIs, SLAs, risk indicators, maturity, dependencies, and control effectiveness.
• Coordinate with security, technology, risk, compliance, business, enterprise, and third-party stakeholders on transitions, enhancements, issue resolution, and service accountability.
• Review AI and quantum-related initiatives and recommend secure, compliant, risk-informed, and responsible adoption practices.

Requirements

• Demonstrated experience in cybersecurity, information security, technology risk, or security service management.
• Experience providing governance or oversight across application, cloud, endpoint, or network security.
• Strong understanding of risk management, control frameworks, regulatory expectations, audit processes, and compliance requirements.
• Experience defining or managing service strategies, roadmaps, prioritization, and operational governance.
• Ability to work across a complex organization and influence technology, risk, compliance, and business stakeholders.
• Strong written and verbal communication skills, including the ability to present to technical and non-technical stakeholders.
• Proven ability to manage competing priorities in a fast-paced environment.
• Strong knowledge of cybersecurity governance, service management, security controls, technology risk management, operational resilience, stakeholder management, and partnership practices.
• Ability to translate business, regulatory, and risk requirements into service priorities and governance actions; develop reports; identify risks; escalate issues; and drive resolution.

Nice to have

• Experience in financial services or another highly regulated environment.
• Familiarity with U.S. regulatory expectations for cybersecurity and technology risk.
• Experience with Enterprise Security Services, shared service models, or third-party security service providers.
• Understanding of emerging technology, including AI governance, AI risk considerations, and responsible technology adoption.
• Experience supporting audit readiness, issue remediation, and control maturity improvement initiatives.

Culture & Benefits

• Hybrid work environment with 3 days in the office and 2 days remote.
• Medical, dental, vision, health savings account, life insurance, disability, and other insurance plans.
• Paid time off, including sick leave, parental leave, vacation, and holidays.
• 401(k), banking benefits, incentive pay, wellbeing support, and recognition programs.
• Paid Purpose Day for personal growth and development.
• Inclusive and accessible candidate and workplace environment.

Hiring process

• An attribute-based assessment and other skills tests may be required, including simulation, coding, or MS Office assessments.