Director, Third Party Governance Office (TPGO), Vendor Management

We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients.

Job Description Summary

This role supports the governance and oversight of third-party and intercompany arrangements across the UK, Europe and APAC.

It is responsible for ensuring third‑party risk management activities, risk assessments, service reviews and performance monitoring are carried out in line with internal requirements and regional regulatory expectations.

The role also contributes to regulatory change implementation, contract uplift activity, senior management reporting, and the ongoing enhancement of third‑party risk and intercompany services frameworks, working closely with internal stakeholders, vendors and governance partners.

Key Responsibilities

• Act as a regional TPGO point of contact for assigned APAC third‑party and intercompany arrangements, supporting business owners, relationship managers, vendors and internal stakeholders through the third‑party lifecycle.
• Administer and maintain appropriate third‑party risk management tooling and records, ensuring system‑held information, dashboards and reporting are accurate, complete and current.
• Coordinate completion and review of third‑party risk assessments, due diligence, regional criticality/materiality determinations, concentration risk reviews, exit planning and ongoing monitoring activities.
• Support service review governance, including review of KPIs, service performance information, issues, actions, escalation themes and remediation progress.
• Assist with identification of third‑party and intercompany arrangements requiring regulatory or contractual uplift, working with Enterprise TPGO, Procurement, Legal, Risk, Compliance, Technology and business owners.
• Consolidate and analyse third‑party risk data for regional governance forums, senior management updates, regulatory responses and other management reporting requirements.
• Support the ongoing development and continuous improvement of regional third‑party risk‑management procedures, standards, playbooks and control documentation.
• Provide practical guidance to business owners and stakeholders on their responsibilities under the TPRM programme and applicable APAC regulatory expectations.
• Facilitate meetings with third parties, business owners and internal stakeholders to coordinate actions, track deliverables and support effective governance.
• Maintain awareness of regional regulatory developments impacting third‑party risk, outsourcing, operational resilience and intercompany services, and support implementation of required changes.
• Cross‑Functional Relationships

Wide range of internal and external contacts, including APAC business owners, relationship managers, regional senior management, Enterprise TPGO, Procurement, Legal, Compliance, Risk, Technology, Operations, Finance, vendors and intercompany service providers.

Compliance Requirements

As an employee of CIBC, the incumbent must comply with all applicable CIBC, Line of Business and regional policies, standards, guidelines and controls, including requirements relating to third‑party risk management, outsourcing, operational resilience, information security, procurement, records management and conduct.

• Knowledge and Skills
• Experience in third‑party risk management, vendor management, outsourcing governance, operational risk, procurement, compliance or a related control function, preferably within financial services.
• Understanding of third‑party lifecycle activities, including intake, risk assessment, due diligence, contracting, ongoing monitoring, service reviews, issue management, renewal and termination.
• Knowledge of regional regulatory expectations for third‑party risk, outsourcing, operational resilience and intercompany arrangements, with experience supporting APAC jurisdictions desirable.
• Strong analytical, conceptual thinking and problem‑solving capability, with the ability to identify risks, assess impacts and recommend practical solutions.
• Strong written and verbal communication skills, including the ability to prepare clear governance updates, management reporting and stakeholder communications.
• Ability to influence and collaborate across functions, geographies and levels of seniority, including with stakeholders in different time zones.
• Highly organised, able to work independently, manage priorities and support multiple concurrent activities under time‑sensitive conditions.
• Technologically adept, including proficiency in Microsoft Office and third‑party risk‑management, procurement or workflow tools such as Archer or equivalent platforms.
• Working Conditions

London‑based role supporting a regional remit across APAC, requiring effective prioritisation of concurrent deliverables, governance cycles and stakeholder requests.

May be required to work outside normal working days or hours where necessary to support APAC stakeholders, regulatory timelines, governance forums or urgent issue resolution.

EEO Statement

CIBC is committed to creating an inclusive environment where all team members and clients feel like they belong.

We seek applicants with a wide range of abilities and we provide an accessible candidate experience.

If you need accommodation, please contact Mailbox. careers-carrieres@cibc. com.

Legal & Contact

You need to be legally eligible to work at the location(s) specified above and, where applicable, must have a valid work or study permit.

• Job Details
• Job Location: 150 Cheapside, 2nd Flr, London
• #J-18808-Ljbffr