Usd1m is only small amount for a bank.
CFO level has certain authority to execute without approval.

But if indeed the story is true that she got scammed this way, she still unfit for the post.