Senior Manager, Environmental & Social (E&S) Risk Governance & Controls

BMO•Toronto, ON

2d•Hybrid

About The Position

This role provides an opportunity for an experienced risk professional to contribute directly to how the Bank governs, manages, and oversees Environmental & Social (E&S) risk, an area of increasing strategic importance and regulatory scrutiny inclusive of matters such as climate risk, biodiversity risk, and human rights risk. As Senior Manager, Environmental & Social (E&S) Risk Governance & Controls, you will play a key role in ensuring that the Bank’s approach to E&S risk is robust and cohesive, by providing guidance, enablement, oversight, and challenge regarding E&S risk. You will, for instance, support the development and maintenance of the Bank's E&S risk policy documentation, risk taxonomy, and qualitative risk appetite statement; assist in the preparation of internal and external reporting on E&S risk; benchmark the Bank’s E&S risk program against peers; lead a variety of special projects on E&S risk; and support the ongoing maintenance of our control environment. The role sits within the second line of defence and is designed for a seasoned professional who brings sound judgment, strong risk acumen, and the ability to operate effectively in ambiguity amid evolving expectations. You will work closely with partners across the enterprise, contribute to senior and committee‑level discussions, and help strengthen the Bank’s overall risk resilience as external expectations continue to mature. This is a senior individual contributor role with meaningful scope and visibility. It offers the opportunity to apply depth of experience in a complex environment, supported by a strong risk culture, a collaborative team, and a planned transition period that enables thoughtful onboarding and effective knowledge transfer.

Requirements

7+ years Experience in risk management, governance, or compliance, gained within financial services, insurance, consulting, or a regulatory setting; second‑line‑of‑defence experience is an asset
Deep understanding of governance frameworks, policy development, and controls, including experience in enterprise‑wide risk management and governance, risk, and control (GRC) roles
Proven ability to assess and interpret policy requirements and regulatory guidance, understand their implications, and translate expectations into clear, well‑structured policy, governance, and control outcomes
Strong written and verbal communication skills, with experience producing concise, high‑quality documentation and materials for senior leaders and oversight forums
Experience building effective relationships and partnering across functions and organizational levels to drive alignment and outcomes
A measured, self‑directed approach, with comfort operating in ambiguity and applying professional judgment as priorities and expectations evolve
Demonstrated critical thinking and independent judgment, with the credibility to provide constructive challenge and thoughtful advice
Strong organizational discipline, with the ability to manage multiple priorities, initiatives, and timelines effectively
A track record of working across multiple roles, mandates, or domains, demonstrating breadth, adaptability, ability to pivot as work evolves, and continuous professional growth
Typically 7+ years of relevant experience and post-secondary degree in related field of study (business, commerce, finance, risk management, law, public policy, accounting, etc.) or an equivalent combination of education and experience.
Experience in risk management, audit, compliance, governance, policy, consulting, financial regulation, regulatory affairs and/or government relations is preferred.
In-depth knowledge of business and regulatory environment.
In-depth/expert knowledge & experience with risk policy frameworks; quality control/testing frameworks. e.g. SOX 404, COBIT and COSO frameworks.
Seasoned professional with a combination of education, experience and industry knowledge.
Verbal & written communication skills - In-depth / Expert.
Analytical and problem solving skills - In-depth / Expert.
Influence skills - In-depth / Expert.
Collaboration & team skills; with a focus on cross-group collaboration - In-depth / Expert.
Able to manage ambiguity.
Data driven decision making - In-depth / Expert.

Nice To Haves

Direct experience in environmental, social, or climate‑related risk is an asset but not required. Professionals with strong, transferable experience in governance, risk management, or compliance and an interest in applying their expertise in this evolving area are encouraged to apply.

Responsibilities

Develops and maintains an effective internal control framework that defines the ways and methods governance is implemented, managed, and monitored in the designated business/group portfolio.
Applies specialized knowledge of risk management, regulatory compliance and internal controls related to business processes and information.
Closely monitors regulatory developments on E&S risk management from international governance bodies and prudential regulators and supervisors across BMO’s global footprint (North America, Europe, Asia).
Quickly synthesizes relevant regulatory developments, assesses their impact on BMO, and communicates key information to relevant internal stakeholders through a variety of media.
Supports the Bank’s response to regulatory reviews and exams on E&S risk management, including climate risk management.
Represents BMO at trade association meetings.
Completes and maintains detailed gap analyses against requirements to inform program plan deliverables.
Stays abreast of linkages and intersections between E&S risk (including climate risk), and the Tier 1 Risks and their lower tier risks in the Bank’s Risk Taxonomy.
Stays abreast of linkages and intersections between E&S risk (including climate risk), and the Bank’s Risk Appetite Framework.
Becomes familiar with the full depth and breadth of the Bank’s Policy Framework.
Integrates E&S Risk considerations (including on climate risk) into relevant policy documents, including by socializing E&S Risk with relevant policy document owners and drafting language that would satisfy regulatory requirements, business needs, and audit expectations.
Centrally manages the E&S Risk Management team’s contributions to the annual Climate Report and Sustainability Report and other public disclosures.
Manages and responds to benchmarking surveys/questionnaires on E&S risk and climate risk, in addition to benchmarking the Bank’s E&S Risk journey (including on climate risk) against peers.
Supports the business unit's compliance with Operational Non-Financial Risk expectations, including with respect to our Product/Service, Internal Activity, Process, Risk and Control (PRC) Library; Product/Service & Process Risk Assessment (PSPRA); Monitoring & Testing, etc.
Provides strategic input into business decisions as a trusted advisor.
Makes recommendations to senior leaders on strategy and new initiatives, based on an in-depth understanding of the business/group.
Acts as a subject matter expert on relevant regulations and policies.
May network with industry contacts to gain competitive insights and best practices.
Interprets new regulations and assesses impacts to the internal controls governance framework/program.
Develops reports on the status of the governance program or framework components to various internal & external stakeholder audiences.
Influences and negotiates to achieve business objectives.
Identifies emerging issues and trends to inform decision-making.
Recommends business priorities, advises on resource requirements and develops roadmap for strategic execution.
Manages resources and leads the execution of strategic initiatives to deliver on business and financial goals.
Measures the effectiveness of risk governance system and framework; recommends changes as required.
Conducts independent analysis and assessment to resolve strategic issues.
Leads the development and maintenance of the internal controls governance system and framework.
Acts as the prime subject matter expert for internal/external stakeholders.
Designs and produces regular and ad-hoc reports, and dashboards.
Develops and manages comprehensive information management systems; designs and/or leads initiatives to improve processes, analysis and reporting.
Leads the development of the communication strategy focusing on positively influencing or changing behaviour.
Leads change management programs of varying scope and type, including readiness assessments, planning, stakeholder management, execution, evaluation and sustainment of initiatives.
Leads the execution of operational programs; assesses and adapts as needed to ensure quality of execution.
Manages the review and sign-off process for relevant regulatory reporting.
Leads and integrates the monitoring, measurement & reporting on the status of the internal controls governance framework/program to internal & external stakeholders.
Leads the management of governance meetings and maintenance of governing body mandates, oversight and approval guidelines.
May provide specialized support for other internal and external regulatory requirements.
Provides input into the planning and implementation of ongoing operational programs in support of the model validation/risk framework.
Leads in the design, implementation and management of core business/group processes.
Develops governance and control-related solutions and makes recommendations based on an understanding of the business strategy and stakeholder needs.
Provides advice and guidance to assigned business/group on the implementation of the control framework, including effective challenge.
Performs testing on design of controls as required e.g. observation, inspection, replication, recalculation to ensure risks are identified and controls are effective.
Reviews processes and identifies opportunities for risk mitigation through proposing new controls or revising existing controls.
Identifies where corrective actions are required and escalates per guidelines; ensures corrective action is taken as necessary.
Coordinates and participates in the execution of oversight/governance activities including reporting; assessment of education & training needs, development/delivery of training; development and execution of regulatory administration processes & procedures; management of review/updates to policies, etc.
Consults with stakeholders to improve consistency and transparency of control measurement/metrics and reporting.
Assists with the interpretation of new or changing regulations and assessing impacts to the governance frameworks.
Develops and maintains in-depth knowledge of business and related risk management requirements and legislative/regulatory directives and guidance.
Builds effective relationships with internal/external stakeholders.
Ensures alignment between stakeholders.
Analyzes data and information to provide insights and recommendations.
Documents the internal control governance system, processes and framework to describe compliance requirements, activities, processes, roles & responsibilities.
Develops tools, checklists and communications to address gaps, issues and new requirements.
Monitors and tracks performance; addresses any issues.
Operates at a group/enterprise-wide level and serves as a specialist resource to senior leaders and stakeholders.
Applies expertise and thinks creatively to address unique or ambiguous situations and to find solutions to problems that can be complex and non-routine.
Implements changes in response to shifting trends.
Broader work or accountabilities may be assigned as needed.