Director, Third Party Governance Office (TPGO), Vendor Management

We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients.

At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute.

To learn more about CIBC, please visit CIBC.com

Job Description Summary

This role supports the governance and oversight of third-party and intercompany arrangements across the UK, Europe and APAC. It is responsible for helping ensure third party risk management activities, risk assessments, service reviews and performance monitoring are carried out in line with internal requirements and regional regulatory expectations. The role also contributes to regulatory change implementation, contract uplift activity, senior management reporting, and the ongoing enhancement of third party risk and intercompany services frameworks, working closely with internal stakeholders, vendors and governance partners.

JOB PURPOSE

• Support the Regional Third Party Governance Office (TPGO) team based in London, with responsibility for third party risk governance and oversight activity across the APAC region.

• Facilitate completion, review and challenge of third party and intercompany lifecycle documentation, including risk assessments, due diligence, criticality/materiality assessments, service reviews and ongoing monitoring requirements.

• Help ensure third party risk management activities are completed in line with CIBC requirements, the Third Party Risk Management programme, and applicable regional regulatory expectations across APAC.

• Support regulatory change implementation, contract uplift activity, senior management reporting and continuous improvement of regional third party risk and intercompany services frameworks.

KEY ACCOUNTABILITIES

• Act as a regional TPGO point of contact for assigned APAC third party and intercompany arrangements, supporting business owners, relationship managers, vendors and internal stakeholders through the third party lifecycle.

• Administer and maintain appropriate third party risk management tooling and records, ensuring system-held information, dashboards and reporting are accurate, complete and current.

• Coordinate completion and review of third party risk assessments, due diligence, regional criticality/materiality determinations, concentration risk reviews, exit planning and ongoing monitoring activities.

• Support service review governance, including review of KPIs, service performance information, issues, actions, escalation themes and remediation progress.

• Assist with identification of third party and intercompany arrangements requiring regulatory or contractual uplift, working with Enterprise TPGO, Procurement, Legal, Risk, Compliance, Technology and business owners.

• Consolidate and analyse third party risk data for regional governance forums, senior management updates, regulatory responses and other management reporting requirements.

• Support the ongoing development and continuous improvement of regional third party risk management procedures, standards, playbooks and control documentation.

• Provide practical guidance to business owners and stakeholders on their responsibilities under the TPRM programme and applicable APAC regulatory expectations.

• Facilitate meetings with third parties, business owners and internal stakeholders to coordinate actions, track deliverables and support effective governance.

• Maintain awareness of regional regulatory developments impacting third party risk, outsourcing, operational resilience and intercompany services, and support implementation of required changes.

CROSS-FUNCTIONAL RELATIONSHIPS

•     Wide range of internal and external contacts, including APAC business owners, relationship managers, regional senior management, Enterprise TPGO, Procurement, Legal, Compliance, Risk, Technology, Operations, Finance, vendors and intercompany service providers.

COMPLIANCE REQUIREMENTS/RESPONSIBILITIES

•     As an employee of CIBC, the incumbent must comply with all applicable CIBC, Line of Business and regional policies, standards, guidelines and controls, including requirements relating to third party risk management, outsourcing, operational resilience, information security, procurement, records management and conduct.

AUTHORITIES/DECISION RIGHTS

•     As a key contributor to the regional TPGO team, this job has the authority to review and challenge third party risk documentation, recommend process improvements, escalate issues or service concerns, and support management decision-making through accurate reporting and analysis.

KNOWLEDGE AND SKILLS

Experience in third party risk management, vendor management, outsourcing governance, operational risk, procurement, compliance or a related control function, preferably within financial services.

• Understanding of third party lifecycle activities, including intake, risk assessment, due diligence, contracting, ongoing monitoring, service reviews, issue management, renewal and termination.

• Knowledge of regional regulatory expectations for third party risk, outsourcing, operational resilience and intercompany arrangements, with experience supporting APAC jurisdictions desirable.

• Strong analytical, conceptual thinking and problem-solving capability, with the ability to identify risks, assess impacts and recommend practical solutions.

• Strong written and verbal communication skills, including the ability to prepare clear governance updates, management reporting and stakeholder communications.

• Ability to influence and collaborate across functions, geographies and levels of seniority, including with stakeholders in different time zones.

• Highly organised, able to work independently, manage priorities and support multiple concurrent activities under time-sensitive conditions.

• Technologically adept, including proficiency in Microsoft Office and third party risk management, procurement or workflow tools such as Archer or equivalent platforms.

WORKING CONDITIONS

•     London-based role supporting a regional remit across APAC, requiring effective prioritisation of concurrent deliverables, governance cycles and stakeholder requests.

•     May be required to work outside normal working days or hours where necessary to support APAC stakeholders, regulatory timelines, governance forums or urgent issue resolution.

What you need to know

• CIBC is committed to creating an inclusive environment where all team members and clients feel like they belong. We seek applicants with a wide range of abilities and we provide an accessible candidate experience. If you need accommodation, please contact [email protected]
• You need to be legally eligible to work at the location(s) specified above and, where applicable, must have a valid work or study permit

Job Location

150 Cheapside, 2nd Flr,London

Employment Type

Regular

Weekly Hours

35

Skills

Budgeting, Compliance Requirements, Decision Making, Facility Planning, Identifying Risks, Issue Management, Management Reporting, Office Space Planning, Operational Risks, Organizational Processes, Prioritization, Real Estate Advisory Services, Real Estate Management, Real Estate Strategies, Risk Assessments, Risk Governance, Strategic Objectives, Support Management, Workflow Process