Purpose of the Role:
The Manager, Architecture & Technology Risk Management ensures compliance with IT standards and regulatory obligations by supporting the development and implementation of risk assessment practices. The incumbent contributes on risk management, governance and operational resilience within technology and provides strategic support to the Senior Manager. The Manager manages / delivers small to medium initiatives for remediation or control objectives. The incumbent supports the development and revision of IT policies and procedures related to IT governance & controls and the creation of governance and control materials for executive and board meetings.
Key Accountabilities:
- Manages & executes the team’s delivery of first line of defence (LOD) operational, consulting, and advisory services related to technology governance (physical & virtual protection, location, access controls, availability, backups, and resiliency), ensuring compliance to regulatory technology operating requirements, ensuring operational resiliency, and managing software and infrastructure currency and capacity, though the maintenance and evolution of the processes, policies and procedures, and the environmental monitoring and execution of various control tests and risk assessments to ensure the effective management and governance of TI&I, aligned to the organization’s obligations in accordance with Caribbean regulatory mandates, and Canadian OSFI regulatory mandates, and others as may become applicable to mitigate against financial and reputational risk.
- Manages & executes the embedding and adherence to the corporate risk and governance framework objectives, including the. team’s risk activities and control to ensure the effective execution, management, and governance of IT, aligned to the organization’s obligations in accordance with Caribbean regulatory mandates, and Canadian OSFI regulatory mandates, and others as may become applicable to mitigate against financial and reputational risk.
- Manages & executes the provision of updates on significant regulatory themes, trends and concerns that have the potential to affect IT, in collaboration with stakeholders to ensure TI&I senior leadership, and CIBC enterprise TI&I are informed of regional impacts to evolving regulatory frameworks.
- Manages & executes the team’s delivery of operational, consulting, and advisory services to the broader Technology units, related to the ongoing gap assessment and appropriate remediation activities necessary to comply with organizational standards, including the execution and administration of the Critical Asset Inventory Map, Annual Currency Management, and filling of Deviations to ensure the effective management of enterprise technology, in support of the timely and cost-effective delivery of process, practice, and tooling to all technology delivery and operations teams.
- Supports small to medium sized change initiatives across IT Strategy, Architecture & Governance, collaborating with key stakeholders to form multi-disciplinary teams to deliver the expected outcomes of the change initiatives, effectively enhancing the TI&I processes to address the organization’s needs and ensure continual improvement in process efficiencies and improved time-to-market whilst effectively managing the technology landscape within the organization’s risk appetite.
- Reports on KRIs / KPIs, initiative execution progress, and other activities to the Senior Manager, IT Governance, as required to ensure TI&I senior leadership, and CIBC enterprise TI&I are appropriately informed.
Critical Knowledge & Skills Required:
- 5+ years’ experience in a risk or technology field
- Experience working in technical environments while collaborating with multi-disciplined teams
- Experience leading and managing small to medium sized project teams
- Experience in the successful design and implementation of change programmes and / or processes, challenging the status quo
- Good knowledge / experience in one or more of the following:
- business information / technology / integration / data / cloud architecture
- information technology systems deployment and operation
- information technology systems vulnerability management
- risk assessment methodologies.
- Knowledge of the Bank’s digital products and channels and cloud technologies
- Knowledge of the TI&I change processes
- Knowledge of the enterprise risk and change processes
- Ability to examine and analyze data in a systematic and organized manner
- Knowledge of the applicable regulatory frameworks in the countries in which the Bank operates
- Knowledge of risk and audit issues for TI&I.
Experience Required:
- Bachelor’s degree in engineering / computer science / business and / or associated industry qualifications preferred and / or associated professional experience.
JOB SNAPSHOT:
Category: Technology
Function: Technology
Position reports to: Senior Manager, Architecture & Technology Risk Management
Expiry Date: 04/04/2025
