Technology Risk Analyst

at  BMO Financial Group

100 King Street West Toronto Ontario,M5X 1A1

Oversees, monitors, and reports on information and technology risks for a designated portfolio. Develops and monitors the risk management and governance framework and practices leveraged across BMO to manage information and technology risks. Develops and monitors adherence to policies, standards, methodologies, and controls that increase transparency, accuracy, and consistency across groups. Works with stakeholders to implement the methodology, metrics, and program standards for the assigned portfolio to ensure compliance, effective monitoring, timely reporting, and identify action plans.

• Acts as a trusted advisor to assigned business/group.
• Guides/assists in the identification and classification of issues; recommends action plans.
• Influences and negotiates to achieve business objectives.
• Recommends and implements solutions based on analysis of issues and implications for the business.
• Assists in the development of strategic plans.
• Identifies emerging issues and trends to inform decision-making.
• Researches existing or emerging requirements and related best practices to develop recommendations for changes/enhancements.
• Independently assesses the information and technology risk profile (e.g. exposures, material initiatives, systems issues or weaknesses in the control structure) for the assigned portfolio.
• Assists with the interpretation of new or changing regulations and assesses impacts to governance frameworks.
• Helps determine business priorities and best sequence for execution of business/group strategy.
• Conducts independent analysis and assessment to resolve strategic issues.
• Leads the development and maintenance of the governance system and framework.
• Ensures alignment between stakeholders.
• Represents the risk program / governance structure during internal/external regulatory audits and/or examinations.
• Maintains tools and templates for information and technology risk programs and standards e.g. Risk Control Self Assessment (RCSA), Sarbanes-Oxley (SOX), business continuity planning standards and policies for internal and third-party solution development.
• Develops and maintains in-depth knowledge of business and related risk management requirements and legislative/ regulatory directives and guidance.
• Builds effective relationships with internal/external stakeholders.
• Analyzes data and information to provide insights and recommendations.
• Focus is primarily on business/group within BMO; may have broader, enterprise-wide focus.
• Provides specialized consulting, analytical and technical support.
• Exercises judgment to identify, diagnose, and solve problems within given rules.
• Works independently and regularly handles non-routine situations.
• Broader work or accountabilities may be assigned as needed.

QUALIFICATIONS:

• Typically between 5 - 7 years of relevant experience as a Technology Risk professional
• Post-secondary degree in related field of study or an equivalent combination of education and experience.
• Degree in Information Technology, Computer Science, Business Administration, or related field of study preferred.
• Completion of a Risk related certification preferred (e.g. CRISC).
• In-depth knowledge of information and technology risk management practices.
• Knowledge of Regulatory and Compliance requirements for Technology
• Exposure to Financial Industry and pertaining Technology Risk practice
• Experience in 2nd Line of Defence and Operational Risk

Please refer the Job description for details