Managing Director - Cybersecurity & Core Technology Audit

Date limite pour présenter sa candidature :

Adresse :

Groupe de famille d'emploi :

Provides strategic leadership and enterprise-wide oversight of audit coverage across Cybersecurity and Core Technology, ensuring robust, risk-based assurance aligned to the Bank’s evolving technology landscape. The role establishes the audit strategy, testing priorities, and integrated coverage approach for high-risk technology domains, including cybersecurity resilience, technology infrastructure, cloud platforms, engineering practices, software development, service management, technology operations, platform support, operational resilience, physical security, and technology-enabled transformation programs. Operating within the Technology & Operations Audit mandate, the role identifies horizontal audit touchpoints, dependencies, and control considerations across the broader Corporate Audit ecosystem, partnering with LOB and Chief Auditor groups to deliver coordinated coverage.

• Define and execute a risk-based, integrated audit strategy across Cybersecurity and Core Technology that focuses on both current and future focused emerging risk reviews
• Lead ongoing risk assessment activities and development of audit coverage strategies to provide independent assurance over Cybersecurity and Core Technology risks, control effectiveness, and risk management practices.
• Strengthen audit capabilities across Cybersecurity and Core Technology through workforce planning, technical specialization, succession management, methodology enhancement, and targeted capability development in cyber, cloud, infrastructure, engineering, and technology operations risk domains.
• Maintain integrated, risk-based audit coverage across cybersecurity, engineering, technology operations, service management, platform support, cloud, infrastructure, software delivery, operational resilience, and third-party ecosystems, with a focus on identifying systemic risks, enterprise-wide control dependencies, and emerging technology risks. Proactively build partnerships across business, technology, control, and audit teams to support effective risk management, issue remediation, and sustainable control environment
• Serve as the senior audit relationship lead for technology executives, including CISOs, engineering, infrastructure, and operations leaders, while maintaining strategic partnerships with regulators, control functions, and other key stakeholders .Lead audit support for regulatory examinations, horizontal reviews, regulatory commitments, and remediation activities related to Cybersecurity and Core Technology. Ensure audit insights, thematic observations, and risk perspectives are communicated effectively to executive management and the Board. Provide strategic leadership and performance oversight of Directors responsible for portfolio execution and identify opportunities to strengthen ownership and risk alignment while expanding control-level, domain-specific coverage
• Ensure quality, consistency, and timeliness of audit delivery through standardized methodologies, reusable testing approaches, and continuous improvement practices. Establish proactive audit engagement and continuous monitoring across portfolios to enable real-time reprioritization and end-to-end risk visibility
• Drive adoption of analytics, continuous assurance, and AI-enabled auditing (e.g., AI-enabled threats, advanced cyber risks) for better forward-looking risk insights
• Deliver thematic insights, root-cause analysis, and enterprise-wide risk perspectives across technology domains.
• Within the mandate of this role, promotes and supports the Bank’s risk culture including ensuring employees understand their accountabilities for risk-taking activities, promoting an environment of open communication and effective challenge, and establishing the “tone from the top” through leading by example.
• Takes measured risks while protecting the bank by applying our Risk Management Framework in the execution of your role, in line with our Risk Culture and within our approved Risk Appetite, making sound and risk informed decisions that align to business strategy, protect assets, and adhere to applicable policy documents (Frameworks, Policies, Standards, Procedures and Supporting documents), laws and regulations.

People / Culture Leadership Language:

• Role models driving simplicity and productivity enhancements for optimization across groups, driving continuous improvement on key measures.
• Activates our winning culture, aligned with Purpose. Ignites engagement by aligning our culture to our strategy and fueling exceptional execution.

• Fosters an inclusive environment for all employees by eliminating barriers to inclusion.

• Develops leaders, plans for succession, and fosters a high-performance culture.
• Drives top talent acquisition and retention, developing organizational capabilities to drive competitive advantage.
• Leads and mentors a team with diverse risk and business experience, skills, and orientation.
• Leads, promotes, and reinforces the Bank’s Ambition; personally, role models One Bank leadership; drives sustainable improvements in customer loyalty and business growth; adheres and supports enterprise customer experience and brand standards.

Qualifications:

• 15+ years of experience in Internal Audit, Technology Audit, Cybersecurity, or Risk Management within large financial institutions
• Senior leadership experience overseeing complex technology domains, including cybersecurity, infrastructure, cloud, engineering, technology operations, and operational resilience.
• Deep expertise in cybersecurity, technology infrastructure, engineering practices, service management, operational resilience, and technology risk management, with proven ability to lead integrated audit programs across multiple risk domains. Proven ability to lead integrated audit programs across multiple risk domains
• Strong experience engaging regulators and executive stakeholders (CIO, CISO, regulators)
• Demonstrated track record of driving audit transformation (analytics, automation, continuous auditing)
• Experience leading geographically dispersed teams, building and scaling high-performing teams, including capability uplift in specialized domains
• Strong understanding technology risk management and emerging risks, including artificial intelligence, AI-enabled threats, quantum computing implications, technology transformation, evolving regulatory expectations, and advanced supply chain dependencies.

• One or more professional certifications in information systems audit, cybersecurity, or technology risk management required (e.g., CISA, CISSP).
• Additional certifications in cloud platform/security, cybersecurity, network security, service management, or resilience preferred (e.g., CISM, CCSP, CCSK, GIAC, ITIL).

Please note this role will pay with in the base salary range of $160k-$215k Cdn

Salaire :

Type de rémunération :

Ce qui précède représente la fourchette et le type de rémunération de BMO Groupe financier.

Les salaires varieront en fonction de facteurs comme l’emplacement, les compétences, l’expérience, les études et les qualifications pour le poste et pourront inclure une structure de commissions. Les salaires pour les postes à temps partiel seront calculés au prorata du nombre d’heures travaillées régulièrement. Pour les rôles à commission, le salaire susmentionné représente la cible de BMO Groupe financier pour la première année au poste.

La rémunération totale offerte par BMO variera selon le type de rémunération associé au poste et peut comprendre des primes de rendement, des primes discrétionnaires ainsi que d’autres avantages et récompenses. BMO offre également une assurance santé, le remboursement des frais de scolarité, une assurance accident et une assurance vie, ainsi que des régimes d’épargne-retraite. Pour en savoir plus sur nos avantages sociaux, consultez le site : https://jobs.bmo.com/ca/fr/R%C3%A9mun%C3%A9ration-globale

À propos de nous

À BMO, nous sommes animés par une raison d’être commune : Avoir le cran de faire une différence dans la vie, comme en affaires. Cette raison d’être nous invite à entraîner des changements positifs et durables pour nos clients, nos collectivités et nos gens. En travaillant ensemble, en innovant et en repoussant les limites, nous transformons des vies et des entreprises et favorisons la croissance économique partout dans le monde.

En tant que membre de l'équipe de BMO, vous êtes valorisé, respecté et entendu, et vous avez plus de moyens pour progresser et obtenir des résultats. Nous nous efforçons de vous aider à obtenir des résultats dès le premier jour, pour vous-même et nos clients. Nous vous offrirons les outils et les ressources dont vous avez besoin pour franchir de nouvelles étapes, car vous aidez nos clients à franchir les leurs. Au moyen de formation et de coaching approfondis ainsi que de soutien de la direction et d'occasions de réseautage, nous vous aiderons à acquérir une expérience enrichissante et à élargir votre groupe de compétences.

Pour en savoir plus, visitez-nous à l'adresse https://jobs.bmo.com/ca/fr.

BMO s'engage à offrir un milieu de travail inclusif, équitable et accessible. Nous apprenons de nos différences et tirons notre force des gens et de leurs différents points de vue. Des mesures d’adaptation sont disponibles sur demande pour les candidats qui participent à tous les aspects du processus de sélection. Pour demander des mesures d’adaptation, veuillez communiquer avec votre recruteur.

Remarque aux recruteurs : BMO n’accepte pas les curriculum vitæ non sollicités provenant de toute source autre que le candidat directement. Tout curriculum vitæ non sollicité envoyé à BMO, directement ou indirectement, sera considéré comme la propriété de BMO. BMO ne paiera aucuns frais pour les placements découlant de la réception d’un curriculum vitæ non sollicité. Une agence de recrutement doit d’abord détenir une entente de service écrite valide et dûment signée avant d’envoyer des curriculum vitæ.