Manager, Data Risk

at  BMO Financial Group

100 King Street West Toronto Ontario,M5X 1A1
Please note this role is Individual Contributor level.
The Manager, Data Risk, as part of the second line of defense in Operational Non-Financial Risk, will be responsible supporting the Data, Analytics, and AI Risk team in the oversight of Data Risk, and ensuring that strategic advancements in data management are consistent with internal risk management frameworks and meet bank standards. The role will support the Data Risk Management team in executing its mandate to oversee the first line of defense.

Specifically, the role will support:

• Execute procedures and testing protocols to identify incremental data risk in new products or supplier engagements. Escalate material risks or issues to management for action.
• Support the ongoing execution of the Chief Data and Analytics Officer (CDAO) Forum on a monthly basis including preparation of agenda, materials, and monitoring follow-ups.
• Participate in the ongoing improvement and maintenance of the 2nd line of defense Data Risk Directive ensuring alignment among key stakeholders and with Operational Non-Financial Risk programs.
• Provide input into quarterly senior management reporting on data risks and execute internal procedures to ensure accuracy and completeness of reporting.
• Establish ongoing monitoring of data risk related issues across the Bank and active tracking of issues with transparent reporting to management.
• Conduct independent testing of the first line of defense as outlined in internal procedures to identify areas of concern or issues in alignment with the Data Risk Directive.
• Contribute to ongoing execution of maturity assessments on an ongoing basis leveraging oversight work done within the second line of defense.
• Adjust internal procedures and protocols to align with evolving regulatory expectations and changes to frameworks.
• Support management in preparation for internal and external review on Data Risk including from internal audit and regulatory agencies.
• Broader work or accountabilities may be assigned as needed.

QUALIFICATIONS:

• Typically between 5 - 7 years of relevant experience and post-secondary degree in related field of study or an equivalent combination of education and experience.
• Degree in Information Technology, Computer Science, Business Administration, or related field of study preferred.
• Working knowledge of industry standard maturity assessment programs (e.g. DCAM) is a plus.
• In-depth knowledge of information and technology risk management practices.
• In-depth knowledge of regulatory requirements.
• In-depth knowledge and experience with risk policy frameworks; quality control / testing frameworks.
• Deep knowledge and technical proficiency gained through extensive education and business experience.
• Verbal & written communication skills - In-depth.
• Collaboration & team skills - In-depth.
• Analytical and problem solving skills - In-depth.
• Influence skills - In-depth.
• Data driven decision making - In-depth.

• Execute procedures and testing protocols to identify incremental data risk in new products or supplier engagements. Escalate material risks or issues to management for action.
• Support the ongoing execution of the Chief Data and Analytics Officer (CDAO) Forum on a monthly basis including preparation of agenda, materials, and monitoring follow-ups.
• Participate in the ongoing improvement and maintenance of the 2nd line of defense Data Risk Directive ensuring alignment among key stakeholders and with Operational Non-Financial Risk programs.
• Provide input into quarterly senior management reporting on data risks and execute internal procedures to ensure accuracy and completeness of reporting.
• Establish ongoing monitoring of data risk related issues across the Bank and active tracking of issues with transparent reporting to management.
• Conduct independent testing of the first line of defense as outlined in internal procedures to identify areas of concern or issues in alignment with the Data Risk Directive.
• Contribute to ongoing execution of maturity assessments on an ongoing basis leveraging oversight work done within the second line of defense.
• Adjust internal procedures and protocols to align with evolving regulatory expectations and changes to frameworks.
• Support management in preparation for internal and external review on Data Risk including from internal audit and regulatory agencies.
• Broader work or accountabilities may be assigned as needed