Information Security Advisor

Bank of Montreal • Chicago, IL

7d • $90,000 - $180,000

About The Position

The Information Security Advisor provides information security consulting services across BMO and its businesses and groups. The role partners with stakeholders to understand business goals, processes, policies, information, systems, risks, and opportunities, then develops and recommends security strategies and solutions aligned with business needs and applicable standards. As a trusted advisor, the position provides counsel on security principles, frameworks, programs, trends, legislation, regulations, policies, and risk management, and helps stakeholders execute strategic initiatives and determine priorities.

The Advisor provides specialized consulting, analytical, and technical support; supports vendor solution implementation and sustainment; tracks metrics and milestones; and facilitates the planning, analysis, documentation, communication, and management of initiatives and issues. The role promotes security best practices, process improvements, and emerging methodologies, analyzes data to produce actionable recommendations, and helps strengthen security capabilities through continuous improvement and root-cause analysis. It works primarily with a BMO business or group, with possible enterprise-wide reach, exercises independent judgment, and regularly handles non-routine situations.

The role is expected to apply BMO’s Risk Management Framework and Risk Culture, make sound risk-informed decisions within approved risk appetite, protect assets, and comply with applicable policies, laws, and regulations. The typical background is 4–7 years of relevant experience and a post-secondary degree in a related field or an equivalent combination of education and experience. A related professional certification is preferred, particularly an information security certification from a recognized organization such as (ISC)2, ISACA, or SANS.

Requirements

• Typically 4–7 years of relevant experience.
• Post-secondary degree in Information Security, Computer Science, Engineering, Information Systems, or a related field, or an equivalent combination of education and experience.
• In-depth understanding of industry standards and frameworks such as NIST Cyber Security Framework (CSF), ISO 27001 and 27002, and PCI DSS.
• Experience with information security concepts and methodology.
• In-depth knowledge of business analysis and project delivery practices and standards across the project lifecycle.
• In-depth knowledge of information security processes, procedures, and controls.
• Working understanding of information security issues within a business group and ability to solve related problems.
• Working understanding of information security risk and regulatory requirements.
• Verbal and written communication skills at an in-depth level.
• Collaboration and team skills at an in-depth level.
• Analytical and problem-solving skills at an in-depth level.
• Influence skills at an in-depth level.
• Data-driven decision-making skills at an in-depth level.
• Deep knowledge and technical proficiency gained through education and business experience.

Nice To Haves

• At least one certification in a related field is preferred.
• Strong preference for information security certifications from a recognized institution, such as (ISC)2, ISACA, or SANS.

Responsibilities

• Provide information security consulting services to BMO and its businesses and groups.
• Understand business vision, objectives, KPIs, processes, policies, information, and information systems to develop security strategies and solutions aligned with business needs and security standards.
• Build relationships with internal and external stakeholders and act as a trusted advisor to assigned business or group leaders.
• Assist in developing strategic plans and support strategic initiatives with internal and external stakeholders.
• Explain core processes, risks, and mitigation techniques for designated areas, and help determine business priorities and sequencing.
• Analyze strategic problems, data, and information to provide insights, recommendations, and actionable answers to business questions.
• Serve as the day-to-day contact for vendors and support implementation, maintenance, and sustainment of vendor solutions.
• Advise business and group leaders on information security principles, frameworks, programs, approaches, trends, legislation, regulatory requirements, policy interpretation, and risk management.
• Influence and negotiate to advance business performance through information security solutions.
• Track metrics and milestones, recommend resolutions, and escalate issues as appropriate.
• Facilitate stakeholder discussions and plan, elicit, analyze, document, communicate, and manage initiatives and issues using varied elicitation techniques.
• Promote process improvements and methodologies, monitor emerging information security issues and trends, and ensure standards are followed.
• Create and deliver clear, concise, professional presentations.
• Assess information security impacts on project benefits and risks when scope changes.
• Develop and champion information security best practices, including through benchmarking and participation in professional associations.
• Support continuous improvement and root-cause analysis to strengthen information security capabilities.
• Ensure consistent, high-quality work and business results aligned with strategies and productivity goals.
• Apply BMO’s Risk Management Framework and Risk Culture, make risk-informed decisions within approved risk appetite, protect assets, and comply with applicable policies, laws, and regulations.

Benefits

• Health insurance
• Tuition reimbursement
• Accident and life insurance
• Retirement savings plans
• Performance-based incentives and discretionary bonuses may be included in the total compensation package, depending on pay type.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level