Senior Manager, Information Security Risk
Core
Senior risk advisor providing independent oversight, credible challenge, and actionable advice on cybersecurity and related technology risks to senior leaders and governance bodies.
Role type
Senior Manager, Information Security Risk (Second Line of Defense)
Builds
Independent risk assessments, thematic reviews, governance activities, and decision-useful reporting for senior management and regulators.
Domain
Financial Services / Cybersecurity Risk Management
Deliverable
dashboards & analysis
Required skills
Cybersecurity risk management, governance frameworks, regulatory compliance, risk assessment, issue management, remediation governance, strategic advisory, cross-functional leadership, data-informed analysis, regulatory examination support
Preferred skills
Technical expertise in security operations, vulnerability management, cloud security, identity and access management, or security architecture; enterprise architecture experience; emerging technology assessment (via careerplan.io/jobs/g6aec665-senior-manager-information-security-risk-at-bmo-financial)
Technologies
Cloud platforms, security operations tools, vulnerability management systems, identity and access management systems
Responsibilities
Develop and communicate an independent view of cybersecurity risk across assigned portfolios; Advise senior leaders on business decisions and technology transformation with significant cybersecurity implications; Evaluate cybersecurity governance frameworks and recommend improvements; Lead risk-based oversight including independent assessments and thematic reviews; Challenge significant cybersecurity issues and risk acceptances; Monitor risk appetite measures and control performance to identify adverse trends; Represent the second line during regulatory examinations and audits
Seniority
Senior Manager, hands-on IC with strategic advisory and oversight responsibilities
