Senior Manager, Operational Resilience Risk Management Oversight

BMO•Toronto, ON

20h•CA$94,600 - CA$176,000•Onsite

About The Position

This role is specific to Operational Resilience Risk Management within Operational Non-Financial Risk (ONFR) and supports BMO's Second Line of Defense (2LOD) Operational Resilience oversight function. The Senior Manager provides independent oversight, effective challenge, and risk governance across the Bank's Operational Resilience program, with primary focus on Critical Business Products & Services (CBPS), impact tolerances, dependency mapping, scenario testing, resilience monitoring, risk assessment activities, and regulatory alignment. The role operates across multiple resilience disciplines, including Business Continuity, Disaster Recovery, Technology Resilience, Third Party Risk Management, Crisis Management, Data, Cyber Risk, and Operational Risk, helping ensure resilience risks are assessed through an integrated enterprise lens.

Requirements

Typically 7+ years of relevant experience and post-secondary degree in related field of study or an equivalent combination of education and experience.
In-depth / expert knowledge operational risk management practices.
In-depth / expert knowledge of the designated business / product portfolio.
In-depth / expert knowledge of regulatory requirements.
In-depth / expert knowledge of quantitative techniques and economic capital methodologies.
In-depth / expert knowledge & experience with risk policy frameworks; quality control / testing frameworks.
Seasoned professional with a combination of education, experience and industry knowledge.
Verbal & written communication skills - In-depth / Expert.
Analytical and problem solving skills - In-depth / Expert.
Influence skills - In-depth / Expert.
Collaboration & team skills; with a focus on cross-group collaboration - In-depth / Expert.
Able to manage ambiguity.
Data driven decision making - In-depth / Expert.

Nice To Haves

Operational Resilience, Business Continuity, Disaster Recovery, Technology Risk, Cyber Risk, Third Party Risk Management, Operational Risk, or Enterprise Risk Management
Critical Business Products & Services (CBPS), impact tolerances, dependency mapping, recovery strategies, resilience testing, or scenario analysis
Regulatory frameworks and guidance related to operational resilience and non-financial risk management
Governance, oversight, challenge, audit, regulatory examination, or risk management functions within a large financial institution
Fusion Risk Management, GRCE, Archer, ServiceNow GRC, Power BI, Tableau, Power Query, SQL, Excel-based analytics, or other risk reporting and data visualization tools
Data analysis, thematic reporting, dashboard development, and translating large data sets into actionable risk insights for executive and governance audiences

Responsibilities

Independent review and challenge of Critical Business Products & Services (CBPS), impact tolerances, dependency mapping, resilience assessments, and supporting methodology execution
Effective challenge of Operational Resilience activities, including identification of resilience vulnerabilities, concentration risks, dependency weaknesses, and remediation activities
Participation in Operational Resilience scenario testing activities, including review of scenario design, execution, outcomes, lessons learned, and management responses
Oversight of Operational Resilience-related risk assessments, issues, controls, metrics, and governance processes through established ONFR programs and tools
Monitoring and aggregation of resilience-related risks across Operating Groups, with escalation of material themes and emerging risks through established governance forums
Development of enterprise reporting, committee materials, thematic analysis, audit support, regulatory support, and documented evidence of effective challenge
Development of resilience-related metrics, dashboards, trend analysis, and management information to support risk-based decision making
Partnership with First Line Operational Resilience teams, Risk Specialty Areas (RSAs), Senior Operational Risk Officers (SOROs), and other stakeholders to support effective challenge, risk insight, and governance activities
Provides oversight, monitoring and reporting on operational risks for a designated portfolio.
Develops and monitors the operational management framework that includes the governance framework & practices leveraged across BMO to manage operational risks.
Provides policies & standards, methodologies and controls that increase transparency, accuracy and consistency across groups.
Works with stakeholders to implement the methodology, metrics and program standards for the assigned portfolio to ensure compliance as well as effective monitoring, timely reporting and identification of action plans.
Provides strategic input into business decisions as a trusted advisor.
Makes recommendations to senior leaders on strategy and new initiatives, based on an in-depth understanding of the business/group.
Acts as a subject matter expert on relevant regulations and policies.
May network with industry contacts to gain competitive insights and best practices.
Interprets new regulations and assesses impacts to the governance framework.
Develops reports on the status of the governance program or framework components to various internal & external stakeholder audiences.
Influences and negotiates to achieve business objectives.
Identifies emerging issues and trends to inform decision-making.
Recommends business priorities, advises on resource requirements and develops roadmap for strategic execution.
Manages resources and leads the execution of strategic initiatives to deliver on business and financial goals.
Measures the effectiveness of risk governance system and framework; recommends changes as required.
Conducts independent analysis and assessment to resolve strategic issues.
Leads the development and maintenance of the governance system and framework.
Acts as the prime subject matter expert for internal/external stakeholders.
Represents the model validation program / portfolio for internal/external regulatory audits and/or examinations.
Ensures alignment between stakeholders.
Designs and produces regular and ad-hoc reports, and dashboards.
Develops and manages comprehensive information management systems; designs and/or leads initiatives to improve processes, analysis and reporting.
Defines business requirements for analytics & reporting to ensure data insights inform business decision making.
Leads change management programs of varying scope and type, including readiness assessments, planning, stakeholder management, execution, evaluation and sustainment of initiatives.
Leads the development of the communication strategy focusing on positively influencing or changing behaviour.
Leads the execution of operational programs; assesses and adapts as needed to ensure quality of execution.
Manages the review and sign-off process for relevant regulatory reporting.
Leads and integrates the monitoring, measurement & reporting on the status of the operational risk governance program to internal & external stakeholders.
Leads the management of governance meetings and maintenance of governing body mandates, oversight and approval guidelines.
May provide specialized support for other internal and external regulatory requirements.
Provides input into the planning and implementation of ongoing operational programs in support of the operational risk framework.
Leads/participates in the design, implementation and management of core business/group processes.
Administers and maintains operational risk program activities in adherence to all policies, procedures and established processes.
Identifies potential risk situations/ impacts, and make recommendations or escalates to the manager, as per guidelines.
Develops and maintains in-depth knowledge of business and related risk management requirements and legislative/ regulatory directives and guidance.
Builds effective relationships with internal/external stakeholders e.g. business stakeholders and Corporate Support Areas (CSAs) in providing ‘second line of defense’ operational risk management support.
Analyzes data and information to provide insights and recommendations; includes identification of risk impacts for new processes and workflows related to initiatives.
Monitors and tracks performance; addresses any issues.
Coordinates and monitors the review and sign-off of attestations and reporting.
Maintains tools and templates for operational risk programs (e.g., Risk Control Self Assessment (RCSA), Sarbanes-Oxley (SOX) or regulatory compliance), as required.
Operates at a group/enterprise-wide level and serves as a specialist resource to senior leaders and stakeholders.
Applies expertise and thinks creatively to address unique or ambiguous situations and to find solutions to problems that can be complex and non-routine.
Implements changes in response to shifting trends.
Broader work or accountabilities may be assigned as needed.