Associate Director, BRAC Technology at BMO

Job description

Application Deadline: 08/27/2026 Address: 320 S Canal Street Job Family Group: Business Management This role provides risk governance and advisory support for the Technology Group with a focus on risk management, regulatory compliance, control effectiveness, metrics, , and risk appetite alignment. The Business Risk Advisory Controls Team (BRAC) operates in a matrix environment, driving oversight, strengthening the control environment, and leveraging data-driven insights to enhance risk management practices and decision making. Key Responsibilities: Provide expert Regulatory Compliance support, guidance, and advice to T&O in support of the Enterprise Compliance Program (ECP) related to Technology. Identify and communicate new and revised regulatory changes via the Enterprise Regulatory Development Framework (ERDF) and participate in execution of activities for implementation of Enterprise Compliance Program (ECP). Contribute to the sound, efficient operation of T&O by improving the understanding and execution of Risk requirements in accordance with the Enterprise Operational Risk Management Framework (ORMF) related to technology. Performance of risk assessments in accordance with ORMF and ECP requirements. Maintain the T&O Process, Risk and Control (PRC) Framework, Tool, and Control Library to provide management a holistic view of the control environment Manage oversight for all enterprise-level new/revised policies to determine T&O impact, including requests for review/feedback and communication of key policy changes Leverage data to perform root cause and predictive analysis, and provide qualitative and quantitative risk and compliance management report. Core Knowledge: At least 10+ years of Technology or Financial industry work experience with a graduate or post-graduate degree in computer science, engineering, information systems, math or business management At least 5 years of experience in risk and compliance domain with an ability to analyze and evaluate the observations based on compliance, operations, risk model and performance. Ability to review all written materials for compliance with state, federal, and contractual regulations and draft all policy language and is desired Strong data analytics and presentation skills, including advance level fluency in using Excel, Word and PowerPoint and other data analytics dashboard tools. Ability to communicate complex or detailed technical topics to a non-technical business audience, clearly conveying risk assessments, actions needed, and cost implications. CRISC, CGEIT, CISA, CISM, PMP and/or Cloud compliance certification an asset Good data analytics and reporting skills including advance excel and power point skills and skills to use desktop analytics tools. Knowledge of software development practice, concepts/methodologies and technology obtained through formal training and/or work experience Knowledge of data governance frameworks and how these are implemented in complex and large organizations. Well versed in the technology issues affecting financial service organizations and cloud based application service providers Understands the basic tenants of enterprise risk management process (Identify, assess, prioritize, treat and monitor). Contributes to the business’ accountability for the delivery of regulatory programs across applicable Tier 1 Risk Types. Contributes to the design of governance and control requirements for products, processes, and channels. Supports the design, development, automation, and coordination of evidence based controls across Credit & Counterparty, Non Financial, Liquidity & Funding, Market, Strategic, Reputation, and Environmental & Social Risks. Supports effective and efficient compliance with regulatory obligations in alignment with the Bank’s Risk Management Framework and approved Risk Appetite. Makes recommendations to senior leaders on strategy and new initiatives, based on an in-depth understanding of the business/group. Acts as a subject ma