Manager, BRAC Technology

BMO•VIRTUAL(R)59 - REMOTE/TELETRAVAIL - ON - BMO, ON

3d•CA$65,600 - CA$122,600•Remote

About The Position

This role provides risk governance and advisory support for the Technology Group with a focus on risk management, regulatory compliance, control effectiveness, metrics, and risk appetite alignment. The Business Risk Advisory Controls Team (BRAC) operates in a matrix environment, driving oversight, strengthening the control environment, and leveraging data-driven insights to enhance risk management practices and decision making.

Requirements

6+ years of experience in technology or financial services, with a degree in computer science, engineering, info systems, math, or business.
3+ years of experience in risk or compliance, with strong analytical and evaluation skills.
Ability to leverage data analytics and insights to assess risk, identify trends, and support risk-informed decision-making.
Ability to interpret regulatory requirements to support governance and related documentation.
Strong data analytics and presentation skills; advanced Excel, PowerPoint, and experience with dashboard/analytics tools.
Ability to explain complex technical topics in simple terms to business audiences.
Strong understanding of control frameworks (e.g., COSO, NIST, COBIT).
Excellent communication, analytical thinking, collaboration, and problem‑solving skills.
Able to work through ambiguity and make data‑driven decisions.
Typically between 5 - 7 years of relevant experience and post-secondary degree in related field of study or an equivalent combination of education and experience.
Program management skills - In-depth.
Deep knowledge and technical proficiency gained through extensive education and business experience.
Verbal & written communication skills - In-depth.
Collaboration & team skills - In-depth.
Analytical and problem solving skills - In-depth.
Influence skills - In-depth.
Data driven decision making - In-depth.

Nice To Haves

Certifications (asset): CRISC, CGEIT, CISA, CISM, PMP, cloud compliance.

Responsibilities

Provide advisory support to risk assessments, control design, and issue identification and remediation to ensure appropriate risk mitigation and regulatory adherence.
Communicate and support activities related to new or updated regulatory requirements in alignment to Enterprise Compliance Program (ECP).
Oversee various Enterprise risk program execution against defined requirements, timelines, and deliverables; collaborate with key stakeholders to monitor progress, identify risks or delays, and escalate issues to ensure timely and compliant delivery.
Drive design, enhancement, and oversight of the Process, Risk & Control (PRC) environment, including control library integrity, coverage, and effectiveness.
Leverage data analytics and insights to identify emerging risks, inform decision-making, and enhance risk monitoring.
Supports the business/group leader in the effective implementation, maintenance and administration of first line of defense (1st LOD) programs (e.g., operational risk, AML, compliance, regulatory, etc.), including overseeing business operations within the jurisdiction to ensure adherence and efficiency.
Contributes to a strong risk management culture through collaboration with other first line employees, and second & third line functions to ensure Compliance, AML or operational risks are identified, mitigated, monitored and reported on an ongoing basis.
Supports multiple, varied business units with corresponding number of regulators.
Monitors and advises on management of risk requirements within the defined risk appetite.
Manages/supports large/complex risk programs/frameworks /projects/initiatives to ensure risks are appropriately mitigated and regulations adhered to.
Monitors industry and legislative developments and continuously updates programs to ensure they are competitive and effective
Supports the position on regulatory compliance Issues by interpreting requirements (existing, new and emerging) and identifying, analysing and addressing resultant gaps and issues, including those raised through the review of change initiatives.
Understands the identified risk exposures and supports the development of action plans required to mitigate identified risks.
Acts as a subject matter expert in the evaluation, development and implementation of an internal control system.
Supports the execution of strategic initiatives in collaboration with internal and external stakeholders.
Builds effective relationships with internal/external stakeholders.
Breaks down strategic problems, and analyses data and information to provide insights and recommendations.
Builds change management plans of varying scope and type; leads or participates in a variety of change management activities including readiness assessments, planning, stakeholder management, execution, evaluation and sustainment of initiatives.
Monitoring to ensure that 1st line jobs are following defined processes and procedures.
Develops, documents and maintains business/group procedures updating and obtaining approvals as regulations or the operating environment changes and communicates changes to the business/group & relevant stakeholder groups.
Designs measurable sustainment strategies including assessing and recommending mitigations for industry/ segment-specific risks and prioritizing opportunities presented by internal and external stakeholders.
Tracks exception/exemption requests and corresponding approvals.
Facilitates training to ensure business unit employees fully understand requirements.
Provides quality control for investigations, self-reports, examinations and independent reviews conducted by internal and external stakeholders, including regulators, providing verbal and written responses to requests for positions, action plans, information and/or documentation
May act as the designated Primary Business Unit Compliance Officer (BUCO) and/or Anti-Money Laundering Reporting Officer for the operating group and is accountable to meet all program requirements (e.g., Operating Group Compliance Program, AML Program Framework).
Builds awareness, knowledge, and skills and, as necessary, provides communication, practical tools and ongoing support including making presentations, to promote a culture of risk identification and management.
Supports the management of 1st LOD program for the business/group in compliance with appropriate principles, standards & direction from the second line of defense groups. Includes developing and promoting program and ensuring the execution of all program components.
Works with assigned business/group leaders to implement 1st LOD programs and frameworks, developing and maintaining an in-depth understanding of the applicable regulatory and internal risk management requirements.
Interprets and provides advice on the application of the requirements for the business/group.
Develops and maintains an understanding of the business/group strategies and objectives, products and services, internal and external stakeholders and business processes as well as the underlying infrastructure to identify and manage implications and risk exposures for the business/group.
Identifies, investigates, analyzes, documents & mitigates program risks, taking into account jurisdictional issues, and raises any issues or concerns to senior leaders and other stakeholders.
Analyzes the impact and effectiveness of the program through periodic reviews.
Recommends adjustments to the overall program, policy or processes within the business/group in accordance with the Risk Appetite Statement, Governance and Corporate Policy.
Supports the business/group through internal/external audits or regulatory examinations and assists in development of action plans to resolve any identified issues.
Provides support to the development and delivery of training and awareness programs within the business/group to increase awareness of and compliance to risk management requirements.
Focus is primarily on business/group within BMO; may have broader, enterprise-wide focus.
Provides specialized consulting, analytical and technical support.
Exercises judgment to identify, diagnose, and solve problems within given rules.
Works independently and regularly handles non-routine situations.
Broader work or accountabilities may be assigned as needed.