First Line of Defence, Issues Management Analyst

BMO•Toronto, ON

4d•CA$56,000 - CA$103,500

About The Position

The Issue Monitoring/Reviewer is a First Line of Defence (1LOD) role responsible for ensuring the accuracy, completeness, and quality of issue records and ongoing monitoring within Book of Record. This role provides independent review, oversight, and challenge to ensure issues are clearly articulated, risk-aligned, and managed in accordance with internal governance standards. The role supports effective risk management by ensuring that issues are properly documented, monitored, remediated, and reported, with strong alignment to risk, control, and regulatory expectations.

Requirements

5+ years experience in risk management, internal audit, controls, or governance
Strong understanding of Issue Management frameworks and lifecycle
Strong understanding of Risk, control, and governance principles
Strong understanding of Three Lines of Defence model
Experience working with enterprise tools such as Archer (Book of Record) or equivalent GRC platforms

Nice To Haves

Experience in issue quality review, testing, or effective challenge roles
Experience in regulatory, audit, or compliance environments
Familiarity with risk taxonomies and control frameworks
Familiarity with issue remediation and control testing concepts

Responsibilities

Perform detailed review of Book of Record issue records to ensure accurate issue description, root cause, and risk alignment.
Validate appropriate severity rating and primary/impacted risk classification.
Ensure clear linkage to controls, processes, and impacted products/services.
Validate that issue treatment (mitigate vs. accept) is supported by adequate, audit-defensible rationale.
Ensure completeness and accuracy of required BOOK OF RECORD fields and supporting documentation.
Monitor issue progress across the lifecycle to ensure timely updates and adherence to required timelines.
Ensure action plans are defined, tracked, and progressing toward closure.
Validate that target completion dates are realistic and supported.
Provide ongoing oversight to ensure issues are actively managed and remain aligned to risk exposure.
Provide constructive challenge to Issue Owners and Managers to improve clarity and precision of issue documentation.
Ensure alignment between risk, control breakdown, and remediation approach.
Identify gaps, inconsistencies, or unsupported assumptions in issue records.
Ensure issue records meet minimum standards prior to escalation to 2LOD Effective Challenge.
Ensure issues are appropriately aligned to Enterprise Risk Taxonomy and Intermediate Risk categories.
Ensure issues are appropriately aligned to the control framework and identified control failures.
Confirm that issue documentation clearly articulates control deficiencies or breakdowns.
Confirm that issue documentation clearly articulates the impact to risk exposure and control environment.
Support preparation of issue reporting outputs, including issue status, aging, and severity trends.
Support preparation of overdue issues and remediation progress reports.
Ensure issue data supports transparent and accurate reporting to governance forums and committees.
Partner with Issue Owners, Action Plan Managers, and Business Units.
Partner with Risk and governance teams (e.g., 1LOD, 2LOD).
Provide guidance on issue management standards, expectations, and best practices.
Escalate concerns where issues do not meet required standards or timelines.