Address:

This role provides risk governance and advisory support for the Technology Group with a focus on risk management, regulatory compliance, control effectiveness, metrics, , and risk appetite alignment. The Business Risk Advisory Controls  Team (BRAC) operates in a matrix environment, driving oversight, strengthening the control environment, and leveraging data-driven insights to enhance risk management practices and decision making.

Key Responsibilities:

• Provide expert Regulatory Compliance support, guidance, and advice to T&O in support of the Enterprise Compliance Program (ECP) related to Technology.
• Identify and communicate new and revised regulatory changes via the Enterprise Regulatory Development Framework (ERDF) and participate in execution of activities for implementation of Enterprise Compliance Program (ECP).
• Contribute to the sound, efficient operation of T&O by improving the understanding and execution of Risk requirements in accordance with the Enterprise Operational Risk Management Framework (ORMF) related to technology.
• Performance of risk assessments in accordance with ORMF and ECP requirements.
• Maintain the T&O Process, Risk and Control (PRC) Framework, Tool, and Control Library to provide management a holistic view of the control environment
• Manage oversight for all enterprise-level new/revised policies to determine T&O impact, including requests for review/feedback and communication of key policy changes
• Leverage data to perform root cause and predictive analysis, and provide qualitative and quantitative risk and compliance management report.
  

Core Knowledge:

• At least 10+ years of Technology or Financial industry work experience with a graduate or post-graduate degree in computer science, engineering, information systems, math or business management
• At least 5 years of experience in risk and compliance domain with an ability to analyze and evaluate the observations based on compliance, operations, risk model and performance.
• Ability to review all written materials for compliance with state, federal, and contractual regulations and draft all policy language and is desired
• Strong data analytics and presentation skills, including advance level fluency in using Excel, Word and PowerPoint and other data analytics dashboard tools.
• Ability to communicate complex or detailed technical topics to a non-technical business audience, clearly conveying risk assessments, actions needed, and cost implications.
• CRISC, CGEIT, CISA, CISM, PMP and/or Cloud compliance certification an asset
• Good data analytics and reporting skills including advance excel and power point skills and skills to use desktop analytics tools.
• Knowledge of software development practice, concepts/methodologies and technology obtained through formal training and/or work experience
• Knowledge of data governance frameworks and how these are implemented in complex and large organizations.
• Well versed in the technology issues affecting financial service organizations and cloud based application service providers
• Understands the basic tenants of enterprise risk management process (Identify, assess, prioritize, treat and monitor).

Contributes to the business’ accountability for the delivery of regulatory programs across applicable Tier 1 Risk Types. Contributes to the design of governance and control requirements for products, processes, and channels. Supports the design, development, automation, and coordination of evidence based controls across Credit & Counterparty, Non Financial, Liquidity & Funding, Market, Strategic, Reputation, and Environmental & Social Risks. Supports effective and efficient compliance with regulatory obligations in alignment with the Bank’s Risk Management Framework and approved Risk Appetite.

• Makes recommendations to senior leaders on strategy and new initiatives, based on an in-depth understanding of the business/group.

• Acts as a subject matter expert on relevant regulations and policies.

• Acts as a strategic partner in which the program elements becomes an integrated component of the overall business/group strategies and helps drive business impact.

• Prepares and briefs senior leaders on regulatory matters across multiple businesses/groups.

• Supports multiple, similar business units with moderate complexity & business transaction risk.

• Represents the business/group  on Governance/Risk Working Groups/Forums and provides regular updates.

• Monitors and advises on management of risk requirements within the defined risk appetite.

• Manages/supports large/complex risk programs/frameworks /projects/initiatives to ensure risks are appropriately mitigated and regulations adhered to.

• Monitors industry and legislative developments and continuously updates programs to ensure they are competitive and effective.

• Supports the position on regulatory compliance issues by interpreting requirements (existing, new and emerging) and identifying, analysing and addressing resultant gaps and issues, including those raised through the review of change initiatives. Understands the identified risk exposures and supports the development of action plans required to mitigate identified risks.

• Acts as a subject matter expert in the evaluation, development and implementation of an internal control system.

• May network with industry contacts to gain competitive insights and best practices.

• Recommends business priorities, advises on resource requirements and develops roadmap for strategic execution.

• Manages resources and leads the execution of strategic initiatives to deliver on business and financial goals.

• Conducts independent analysis and assessment to resolve strategic issues.

• Builds effective relationships with internal/external stakeholders.

• Ensures alignment between stakeholders.

• Acts as the prime subject matter expert for internal/external stakeholders.

• Breaks down strategic problems, and analyses data and information to provide insights and recommendations.

• Monitors and tracks performance, and addresses any issues.

• Leads change management programs of varying scope and type, including readiness assessments, planning, stakeholder management, execution, evaluation and sustainment of initiatives.

• Leads the execution of operational programs; assesses and adapts as needed to ensure quality of execution.

• Monitoring to ensure that 1st line jobs are following defined processes and procedures.

• Develops, documents and maintains business/group procedures updating and obtaining approvals as regulations or the operating environment changes and communicates changes to the business/group & relevant stakeholder groups.

• Designs measurable sustainment strategies including assessing and recommending mitigations for  industry/ segment-specific risks and prioritizing opportunities presented by internal and external stakeholders.

• Tracks exception/exemption requests and corresponding approvals.

• Facilitates training to ensure business unit employees fully understand requirements.

• Provides quality control for investigations, self-reports, examinations and independent reviews conducted by internal and external stakeholders, including regulators, providing verbal and written responses to requests for positions, action plans, information and/or documentation

• May act as the designated Primary Business Unit Compliance Officer (BUCO) and/or Anti-Money Laundering Reporting Officer for the operating group and is accountable to meet all program requirements (e.g., Operating Group Compliance Program, AML Program Framework).

• Builds awareness, knowledge, and skills and, as necessary, provides communication, practical tools and ongoing support including making presentations, to promote a culture of risk identification and management.

• Supports the design, development, coordination of implementation, automation and continuous improvement of 1LOD LOB risk management programs, including supporting the establishment and maintenance of LOB specific policies standards, business processes and controls across all applicable financial and non-financial risks.

• Works with assigned business/group leaders to interpret, apply and operationalize relevant regulatory frameworks across the LOB/jurisdiction and designs, develops, coordinates and continually improves the LOBs risk management programs and supporting activities to ensure the business operates within the approved risk appetite and optimizes risk return while meeting BMO’s regulatory compliance obligations and consistent with the Bank’s Risk Management Framework

• Conducts or supports self-assessments to demonstrate control effectiveness and adherence, coordinating 1LOD risk remediation efforts, responding to regulatory requirements, implementing policies, and managing risk measurement and reporting. 

• Develops and maintains an understanding of the business/group strategies and objectives, products and services, internal and external stakeholders and business processes as well as the underlying infrastructure to identify and manage implications and risk exposures for the business/group.

• Identifies, investigates, analyzes, documents & mitigates program risks, taking into account jurisdictional issues, and raises any issues or concerns to senior leaders and other stakeholders.

• Contributes to a strong risk culture through collaboration with 1LOD, and engagement with Second Line of Defence (2LOD), Corporate Audit (3LOD), to ensure risks related to products, services, and processes are identified, assessed, measured and managed within the approved risk appetite, and reported on an ongoing basis.

• Analyzes the impact and effectiveness of the program through periodic reviews.

• Recommends adjustments to the overall program, policy or processes within the business/group in accordance with the Risk Appetite Statement, Governance and Corporate Policy.

• Supports the business/group through internal/external audits or regulatory examinations and assists in development of action plans to resolve any identified issues.

• Provides support to the development and delivery of training and awareness programs within the business/group to increase awareness of and compliance to risk management requirements.

• Takes measured risks while protecting the bank by applying our Risk Management Framework in the execution of your role, in line with our Risk Culture and within our approved Risk Appetite, making sound and risk informed decisions that align to business strategy, protect assets, and adhere to applicable policy documents (Frameworks, Policies, Standards, Procedures and Supporting documents), laws and regulations.

• Operates at a group/enterprise-wide level and serves as a specialist resource to senior leaders and stakeholders.

• Applies expertise and thinks creatively to address unique or ambiguous situations and to find solutions to problems that can be complex and non-routine.

• Implements changes in response to shifting trends.

• Broader work or accountabilities may be assigned as needed.

Qualifications:

• Typically 7+ years of relevant experience and post-secondary degree in related field of study or an equivalent combination of education and experience.

• Program Management skills - Expert.

• Seasoned professional with a combination of education, experience and industry knowledge.

• Verbal & written communication skills - In-depth / Expert.

• Analytical and problem solving skills - In-depth / Expert.

• Influence skills - In-depth / Expert.

• Collaboration & team skills; with a focus on cross-group collaboration - In-depth / Expert.

• Able to manage ambiguity.

• Data driven decision making - In-depth / Expert.