Job description

Application Deadline: 10/30/2026 Address: 320 S Canal Street Job Family Group: Audit, Risk & Compliance Provides strategic leadership and enterprise-wide oversight of audit coverage across Cybersecurity and Core Technology, ensuring robust, risk-based assurance aligned to the Bank’s evolving technology landscape. The role establishes the audit strategy, testing priorities, and integrated coverage approach for high-risk technology domains, including cybersecurity resilience, technology infrastructure, cloud platforms, engineering practices, software development, service management, technology operations, platform support, operational resilience, physical security, and technology-enabled transformation programs. Operating within the Technology & Operations Audit mandate, the role identifies horizontal audit touchpoints, dependencies, and control considerations across the broader Corporate Audit ecosystem, partnering with LOB and Chief Auditor groups to deliver coordinated coverage. • Define and execute a risk-based, integrated audit strategy across Cybersecurity and Core Technology that focuses on both current and future focused emerging risk reviews • Lead ongoing risk assessment activities and development of audit coverage strategies to provide independent assurance over Cybersecurity and Core Technology risks, control effectiveness, and risk management practices. • Strengthen audit capabilities across Cybersecurity and Core Technology through workforce planning, technical specialization, succession management, methodology enhancement, and targeted capability development in cyber, cloud, infrastructure, engineering, and technology operations risk domains. • Maintain integrated, risk-based audit coverage across cybersecurity, engineering, technology operations, service management, platform support, cloud, infrastructure, software delivery, operational resilience, and third-party ecosystems, with a focus on identifying systemic risks, enterprise-wide control dependencies, and emerging technology risks. Proactively build partnerships across business, technology, control, and audit teams to support effective risk management, issue remediation, and sustainable control environment • Serve as the senior audit relationship lead for technology executives, including CISOs, engineering, infrastructure, and operations leaders, while maintaining strategic partnerships with regulators, control functions, and other key stakeholders .Lead audit support for regulatory examinations, horizontal reviews, regulatory commitments, and remediation activities related to Cybersecurity and Core Technology. Ensure audit insights, thematic observations, and risk perspectives are communicated effectively to executive management and the Board. Provide strategic leadership and performance oversight of Directors responsible for portfolio execution and identify opportunities to strengthen ownership and risk alignment while expanding control-level, domain-specific coverage • Ensure quality, consistency, and timeliness of audit delivery through standardized methodologies, reusable testing approaches, and continuous improvement practices. Establish proactive audit engagement and continuous monitoring across portfolios to enable real-time reprioritization and end-to-end risk visibility • Drive adoption of analytics, continuous assurance, and AI-enabled auditing (e.g., AI-enabled threats, advanced cyber risks) for better forward-looking risk insights • Deliver thematic insights, root-cause analysis, and enterprise-wide risk perspectives across technology domains. • Within the mandate of this role, promotes and supports the Bank’s risk culture including ensuring employees understand their accountabilities for risk-taking activities, promoting an environment of open communication and effective challenge, and establishing the “tone from the top” through leading by example. • Takes measured risks while protecting the bank by applying our Risk Management Framework in the execution of your role, in line with our Risk Culture and within our approved Risk Appetite, making sound and risk informed decisions that align to business strategy, protect assets, and adhere to applicable policy documents (Frameworks, Policies, Standards, Procedures and Supporting documents), laws and regulations. People / Culture Leadership Language: • Role models driving simplicity and productivity enhancements for optimization across groups, driving continuous improvement on key measures. • Activates our winning culture, aligned with Purpose. Ignites engagement by aligning our culture to our strategy and fueling exceptional execution. • Fosters an inclusive environment for all employees by eliminating barriers to inclusion. • Develops leaders, plans for succession, and fosters a high-performance culture. • Drives top talent acquisition and retention, developing organizational capabilities to drive competitive advantage. • Leads and mentors a team with diverse risk and business experience, skills, and orientation. • Leads, promotes, and reinforces the Bank’s Ambition; personally, role models One Bank leadership; drives sustainable improvements in customer loyalty and business growth; adheres and supports enterprise customer experience and brand standards. Qualifications: • 15+ years of experience in Internal Audit, Technology Audit, Cybersecurity, or Risk Management within large financial institutions • Senior leadership experience overseeing complex technology domains, including cybersecurity, infrastructure, cloud, engineering, technology operations, and operational resilience. • Deep expertise in cybersecurity, technology infrastructure, engineering practices, service management, operational resilience, and technology risk management, with proven ability to lead integrated audit programs across multiple risk domains. Proven ability to lead integrated audit programs across multiple risk domains • Strong experience engaging regulators and executive stakeholders (CIO, CISO, regulators) • Demonstrated track record of driving audit transformation (analytics, automation, continuous auditing) • Experience leading geographically dispersed teams, building and scaling high-performing teams, including capability uplift in specialized domains • Strong understanding technology risk management and emerging risks, including artificial intelligence, AI-enabled threats, quantum computing implications, technology transformation, evolving regulatory expectations, and advanced supply chain dependencies. • One or more professional certifications in information systems audit, cybersecurity, or technology risk management required (e.g., CISA, CISSP). • Additional certifications in cloud platform/security, cybersecurity, network security, service management, or resilience preferred (e.g., CISM, CCSP, CCSK, GIAC, ITIL). • undefined Please note this role will be targeting a base salary range of $200k-$260k USD per annum Salary : Pay Type: Salaried The above represents BMO Financial Group’s pay range and type. Salaries will vary based on factors such as location, skills, experience, education, and qualifications for the role, and may include a commission structure. Salaries for part-time roles will be pro-rated based on number of hours regularly worked. For commission roles, the salary listed above represents BMO Financial Group’s expected target for the first year in this position. BMO Financial Group’s total compensation package will vary based on the pay type of the position and may include performance-based incentives, discretionary bonuses, as well as other perks and rewards. BMO also offers health insurance, tuition reimbursement, accident and life insurance, and retirement savings plans. To view more details of our benefits, please visit: jobs.bmo.com About Us At BMO we are driven by a shared Purpose: Boldly Grow the Good in business and life. It calls on us to create lasting, positive change for our customers, our communities and our people. By working together, innovating and pushing boundaries, we transform lives and businesses, and power economic growth around the world. As a member of the BMO team you are valued, respected and heard, and you have more ways to grow and make an impact. We strive to help you make an impact from day one – for yourself and our customers. We’ll support you with the tools and resources you need to reach new milestones, as you help our customers reach theirs. From in-depth training and coaching, to manager support and network-building opportunities, we’ll help you gain valuable experience, and broaden your skillset. To find out more visit us at jobs.bmo.com BMO is proud to be an equal employment opportunity employer. We evaluate applicants without regard to race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or any other legally protected characteristics. We also consider applicants with criminal histories, consistent with applicable federal, state and local law. BMO is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please send an e-mail to BMOCareers.Support@bmo.com and let us know the nature of your request and your contact information. Note to Recruiters: BMO does not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to BMO, directly or indirectly, will be considered BMO property. BMO will not pay a fee for any placement resulting from the receipt of an unsolicited resume. A recruiting agency must first have a valid, written and fully executed agency agreement contract for service to submit resumes.

Requirements

Must-haves

320 S Canal Street
Audit, Risk & Compliance
Define and execute a risk-based, integrated audit strategy across Cybersecurity and Core Technology that focuses on both current and future focused emerging risk reviews
Lead ongoing risk assessment activities and development of audit coverage strategies to provide independent assurance over Cybersecurity and Core Technology risks, control effectiveness, and risk management practices.
Drive adoption of analytics, continuous assurance, and AI-enabled auditing (e.g., AI-enabled threats, advanced cyber risks) for better forward-looking risk insights
Deliver thematic insights, root-cause analysis, and enterprise-wide risk perspectives across technology domains.
Role models driving simplicity and productivity enhancements for optimization across groups, driving continuous improvement on key measures.
Activates our winning culture, aligned with Purpose. Ignites engagement by aligning our culture to our strategy and fueling exceptional execution.
Fosters an inclusive environment for all employees by eliminating barriers to inclusion.
Develops leaders, plans for succession, and fosters a high-performance culture.
Drives top talent acquisition and retention, developing organizational capabilities to drive competitive advantage.
Leads and mentors a team with diverse risk and business experience, skills, and orientation.
15+ years of experience in Internal Audit, Technology Audit, Cybersecurity, or Risk Management within large financial institutions
Senior leadership experience overseeing complex technology domains, including cybersecurity, infrastructure, cloud, engineering, technology operations, and operational resilience.
Strong experience engaging regulators and executive stakeholders (CIO, CISO, regulators)
Demonstrated track record of driving audit transformation (analytics, automation, continuous auditing)
Experience leading geographically dispersed teams, building and scaling high-performing teams, including capability uplift in specialized domains
One or more professional certifications in information systems audit, cybersecurity, or technology risk management required (e.g., CISA, CISSP).

Nice-to-haves

Additional certifications in cloud platform/security, cybersecurity, network security, service management, or resilience preferred (e.g., CISM, CCSP, CCSK, GIAC, ITIL).

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

Platform: phenom
Effort: medium

Benefits

Benefits detected in the listing.

Health Insurance