Database Activity Monitoring Governance Analyst, Fall 2026 (Co-op/Internship) - 8 months

BMO•Toronto, ON

6d•CA$54,600 - CA$101,400

About The Position

As a co-op/intern student at BMO, you will have the opportunity to be heard, keep growing and make a difference. You will be part of our campus program to gain the skills and knowledge needed to take on roles similar to the description listed below. Our student experience is designed to integrate you to the BMO team from day one by adding value in the work you do. You will have the opportunity to participate in programs such as the Women in Technology Mentorship Program, BMO Social Squad student-led activities, BMO Academy corporate learning platform, and access to various Employee Resource Groups to further develop your network within BMO. Monitors, restores service, changes, supports and handles day-to-day activities 7/24/365 required to run the mission critical Information Security systems for BMO. Provides responsive customer service in support of cyber security. Builds effective relationships with internal/external stakeholders. Provides input into the planning and implementation of operational programs. May assist with the documentation of procedures and processes or in the preparation of end user materials. Monitors & maintains security tools and applications. Creates activity reports for security tools and applications. Collaborates with internal and external stakeholders in order to deliver on business objectives and to support operational activities for Information Security (e.g., IT, business, and security teams). Analyzes data for risk trends. Builds and implements DBAM (database activity monitoring rules) rules. Researches & tests data protection tooling. Develops an understanding of organizational interactions and complexity to engage with the appropriate matrix areas. Actions service requests, transactions, queries etc. within relevant service level agreements. Coordinates and facilitates incident management activities. Includes deploying changes to the production environment and engaging 2rd party providers contracted to the Bank during an incident. Recommends approaches or changes to streamline and integrates security processes and systems in the organization, while considering Information Security methodology to improve overall efficiency. Provides technical Information Security subject matter expertise. Identifies opportunities to strengthen the capability of the Information Security organization at BMO, such as: sharing expertise to promote technical development and mentoring employees. Stays abreast of industry technical and business trends through participation in professional associations, practice communities and individual learning. Ensures consistent, high quality practices/work and the achievement of business results in alignment with business/group strategies and with productivity goals. Focus may be on a business/group. Thinks creatively and proposes new solutions. Exercises judgment to identify, diagnose, and solve problems within given rules. Works mostly independently. Broader work or accountabilities may be assigned as needed. Take measured risks while protecting the bank by applying our Risk Management Framework in the execution of your role, in line with our Risk Culture and within our approved Risk Appetite, making sound and risk informed decisions that align to business strategy, protect assets, and adhere to applicable policy documents (Frameworks, Policies, Standards, Procedures and Supporting documents), laws and regulations.

Requirements

Motivated individuals with a strong desire to learn.
Preference for candidates enrolled in a post-secondary degree in a technology-related program, or a related field of study or an equivalent combination of formal training, or industry / technical certifications or work experience.
Preference for candidates who have or are pursuing a certification in a related field, with strong preference for information security certifications from a well-recognized institution (e.g. (ISC)2, ISACA, SANS).
Experience in information security or with systems and computer operations (e.g. Identity & Access Management, IT operations, Certification & Key Management, Security Platform Administration, Security Incident Response).
Interest in learning cybersecurity; data analysis & security-focused mindset.
Basic understanding of databases/client–server architecture.
Strong interest in database security, cloud platforms, policy , data regulations & data protection.
Knowledge of information security support and operations concepts, practices, concepts, and technology obtained through formal training and work experience - Good.
Knowledge of information security processes, procedures and controls - Good.
Knowledge of the technical and business environment and the corporate processes and procedures - Good.
Partnering, communication, and negotiation skills to communicate effectively within the team and with technology and business partners - Good.
Understands the scope of complexity that exists in the operating environment and the ways which security platforms impact that environment.
Specialized knowledge from education and/or business experience.
Verbal & written communication skills - In-depth.
Collaboration & team skills - In-depth.
Analytical and problem solving skills - In-depth.
Influence skills - In-depth.

Nice To Haves

Familiarity with security tools is an asset; eagerness to learn is essential.

Responsibilities

Monitors, restores service, changes, supports and handles day-to-day activities 7/24/365 required to run the mission critical Information Security systems for BMO.
Provides responsive customer service in support of cyber security.
Builds effective relationships with internal/external stakeholders.
Provides input into the planning and implementation of operational programs.
May assist with the documentation of procedures and processes or in the preparation of end user materials.
Monitors & maintains security tools and applications.
Creates activity reports for security tools and applications.
Collaborates with internal and external stakeholders in order to deliver on business objectives and to support operational activities for Information Security (e.g., IT, business, and security teams).
Analyzes data for risk trends.
Builds and implements DBAM (database activity monitoring rules) rules.
Researches & tests data protection tooling.
Develops an understanding of organizational interactions and complexity to engage with the appropriate matrix areas.
Actions service requests, transactions, queries etc. within relevant service level agreements.
Coordinates and facilitates incident management activities. Includes deploying changes to the production environment and engaging 2rd party providers contracted to the Bank during an incident.
Recommends approaches or changes to streamline and integrates security processes and systems in the organization, while considering Information Security methodology to improve overall efficiency.
Provides technical Information Security subject matter expertise.
Identifies opportunities to strengthen the capability of the Information Security organization at BMO, such as: sharing expertise to promote technical development and mentoring employees.
Stays abreast of industry technical and business trends through participation in professional associations, practice communities and individual learning.
Ensures consistent, high quality practices/work and the achievement of business results in alignment with business/group strategies and with productivity goals.
Focus may be on a business/group.
Thinks creatively and proposes new solutions.
Exercises judgment to identify, diagnose, and solve problems within given rules.
Works mostly independently.
Broader work or accountabilities may be assigned as needed.
Take measured risks while protecting the bank by applying our Risk Management Framework in the execution of your role, in line with our Risk Culture and within our approved Risk Appetite, making sound and risk informed decisions that align to business strategy, protect assets, and adhere to applicable policy documents (Frameworks, Policies, Standards, Procedures and Supporting documents), laws and regulations.