E&P Resiliency Management Specialist

BMO•Toronto, ON

6d•CA$75,900 - CA$141,900•Hybrid

About The Position

This is a rare and uniquely positioned senior role sitting at the intersection of operational resiliency and technology risk within the Engineering & Platforms division of a regulated bank. The Senior Manager, Resiliency Management serves as a dedicated strategic partner to an aligned Chief Information Officer (CIO), operating with a high degree of autonomy to ensure that technology services are consistently resilient, risks are proactively identified and managed, and regulatory obligations are met without exception. This is not a role for someone who waits to be told what to do. The ideal candidate instinctively knows what good looks like, anticipates issues before they surface, and holds themselves to an exceptionally high standard. You will own the resiliency posture of your assigned portfolio end-to-end — from incident trend analysis to remediation execution — and you will be the person the CIO and Lead Technology Officers rely on when it matters most.

Requirements

7+ years of progressive experience in IT operations, resiliency management, service delivery, or operational risk within a regulated financial services environment.
Demonstrated experience working directly with or reporting into senior technology leadership (Director, VP, or CIO level).
Hands-on background in vulnerability management, patch compliance, or IT risk remediation — with evidence of measurable outcomes.
ITSM end-to-end life cycle knowledge is a must (Problem, Change & Incident). ITIL accreditation is a plus and intimate knowledge of SNOW is also key.
The ability to build professional decks/powerpoint presentations.
Proven ability to build and present executive-level decks to senior leadership, CIO-level stakeholders, and cross-functional business audiences.
Familiarity with hybrid technology environments and the resiliency considerations unique to on-premise and cloud infrastructure.
Demonstrated proficiency in Incident, Problem, and Change Management (INC/PRB/CHG) — understanding how these disciplines interconnect and how to leverage them to drive resiliency outcomes.
Solid understanding of the regulatory environment governing technology resiliency in Canadian financial institutions, and the ability to translate regulatory expectations into operational practice.
Familiarity with BCP/DR frameworks, RTO/RPO concepts, and operational risk practices within a regulated institution.
Strong working knowledge of ITSM frameworks; ITIL certification is an asset.
Awareness of emerging risk trends and the ability to connect external signals to internal resiliency posture.
Exceptional analytical mindset — able to connect disparate incident and problem data into coherent risk narratives, and always answer the 'so what' before walking into a room.
Outstanding written and verbal communication skills, with a track record of building polished, executive-ready presentations that drive decisions — not just awareness.
Highly self-directed — you define your own workplan, set your own priorities, and deliver without needing direction at every turn.
Comfortable operating in ambiguity and navigating complex organizational dynamics with confidence and composure.
Natural relationship builder who earns trust through competence, follow-through, and candor.

Nice To Haves

ITIL accreditation is a plus
intimate knowledge of SNOW is also key
ITIL certification is an asset
You don't need a playbook handed to you. You see a gap, you close it. You see a risk trend before it becomes a problem, and you've already drafted the remediation plan. You're someone who has worked in environments where the bar was high and the scrutiny was real — and you didn't just survive it, you thrived. You understand that resiliency management in a regulated financial institution isn't about checking boxes; it's about protecting the institution, its clients, and the integrity of the systems that millions of people depend on every day.

Responsibilities

Drive the operational resiliency roadmap for your assigned CIO portfolio, proactively identifying gaps and ensuring continuous improvement.
Analyze Problem Records (PRBs) and Incidents (INCs) to surface root causes, recurring themes, and cross-portfolio risk patterns — and translate findings into clear, actionable conclusions for senior audiences.
Track and execute remediation plans in response to resiliency findings, audit observations, and regulatory inquiries.
Participate in monthly resiliency reviews with the CIO, presenting posture assessments, risk indicators, and progress against commitments — always with the insight and 'so what' that turns data into decisions.
Build and deliver high-quality decks and presentations for a range of senior audiences — including your assigned CIO, internal technology executives, cross-functional business stakeholders, and external forums.
Translate complex, technical resiliency data into compelling narratives that drive action — not just reporting what happened, but articulating what it means and what needs to happen next.
Facilitate weekly checkpoint sessions with Lead Technology Officers to review backlogs, resiliency roadmap progress, and outstanding risk items — always arriving prepared with analysis, not just updates.
Build credibility and lasting relationships across engineering, infrastructure, risk, and compliance functions through clear communication and consistent follow-through.
Navigate regulatory scrutiny from applicable oversight bodies and ensure the portfolio's resiliency practices meet or exceed regulatory expectations.
Ensure operational practices align with applicable regulatory frameworks and internal risk appetite thresholds.
Support audit readiness activities and coordinate responses to regulatory findings within your portfolio.
Monitor the evolving regulatory landscape and proactively translate changes into actionable program adjustments.
Monitor service delivery health across hybrid (on-prem and cloud) environments, identifying systemic risks before they become incidents.
Oversee vulnerability and patch compliance posture, working with infrastructure teams to maintain high compliance ratings.
Track and report on key operational risk metrics — going beyond the numbers to identify what they signal and what response is warranted.
Champion a culture of accountability, transparency, and continuous improvement across technology teams.