Information Security Advisor

BMO • Jersey City, NJ

8d • $90,000 - $180,000

About The Position

The Information Security Advisor provides information security consulting services across BMO and its businesses and groups. The role works with stakeholders to understand business needs and opportunities, align security requirements and solutions with business objectives, and ensure solutions meet information security standards. It develops and advises on information security strategy, builds relationships with stakeholders, and promotes effective processes, methodologies, and emerging technologies suited to business requirements.

Serving as a trusted advisor to assigned business and group leaders, the position provides guidance on security principles, frameworks, programs, trends, legislation, regulatory requirements, policy interpretation, and risk management. It supports strategic initiatives, vendor solutions, and project delivery; analyzes data and risks; recommends actions; and helps improve information security capabilities. The advisor works independently, handles non-routine situations, and applies BMO’s Risk Management Framework and approved Risk Appetite when making decisions.

The role typically requires 4–7 years of relevant experience and a post-secondary degree in a related field or an equivalent combination of education and experience. A related certification is preferred, especially an information security certification from a recognized institution.

Requirements

• Typically 4–7 years of relevant experience.
• Post-secondary degree in Information Security, Computer Science, Engineering, Information Systems, or a related field, or an equivalent combination of education and experience.
• In-depth understanding of industry standards and frameworks, such as the NIST Cyber Security Framework, ISO 27001 and 27002, and PCI DSS.
• Experience with information security concepts and methodology.
• In-depth knowledge of business analysis and project delivery practices and standards across the project lifecycle.
• In-depth knowledge of information security processes, procedures, and controls.
• Working understanding of information security issues within a business group and ability to solve related problems.
• Working understanding of information security risk and regulatory requirements.
• Deep knowledge and technical proficiency gained through education and business experience.
• In-depth verbal and written communication skills.
• In-depth collaboration and teamwork skills.
• In-depth analytical and problem-solving skills.
• In-depth influence skills.
• In-depth data-driven decision-making skills.

Nice To Haves

• At least one certification in a related field, with a strong preference for information security certifications from a well-recognized institution such as (ISC)2, ISACA, or SANS.

Responsibilities

• Act as a trusted advisor to assigned business and group stakeholders on information security matters.
• Assist with the development of strategic plans and support execution of strategic initiatives with internal and external stakeholders.
• Explain core processes, risks, and mitigation techniques for designated areas, and help determine business priorities and sequencing.
• Break down strategic problems, analyze data and information, and provide insights, recommendations, and actionable business guidance.
• Serve as the day-to-day contact for vendors and support implementation, maintenance, and sustainment of vendor solutions.
• Translate stakeholder business needs into information security solutions and make recommendations.
• Advise business and group leaders on information security principles, frameworks, programs, approaches, trends, legislation, regulatory requirements, policy interpretation, and risk management.
• Build credibility and influence or negotiate to support business performance through the development and delivery of information security solutions.
• Track metrics and milestones, recommend resolutions, and escalate issues when appropriate.
• Plan, elicit, analyze, document, communicate, and manage initiatives and issues with stakeholders using appropriate elicitation techniques.
• Promote process improvements, methodologies, and adherence to standards while monitoring emerging information security issues and trends.
• Create and deliver professional presentations in a concise and meaningful manner.
• Assess the information security impact of project scope changes on benefits and risks.
• Develop and champion information security best practices, staying current with industry and business trends through benchmarking or professional associations.
• Gather, examine, and interpret data to answer business questions and provide actionable recommendations.
• Support continuous improvement and root cause analysis to strengthen information security capabilities.
• Ensure consistent, high-quality work and achievement of business results in alignment with strategies and productivity goals.
• Apply BMO’s Risk Management Framework and Risk Culture, making sound risk-informed decisions within the approved Risk Appetite and in accordance with applicable policies, laws, and regulations.

Benefits

• Health insurance
• Tuition reimbursement
• Accident and life insurance
• Retirement savings plans
• Performance-based incentives and discretionary bonuses may be included in total compensation.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level