Associate Director, BRAC Advisory Technology

Application Deadline: 08/27/2026 Address: VIRTUAL59 - REMOTE/TELETRAVAIL - ON - BMO Job Family Group: Business Management This role provides risk governance and advisory support for the Technology Group with a focus on risk management, regulatory compliance, control effectiveness, metrics, , and risk appetite alignment. The Business Risk Advisory Controls Team (BRAC) operates in a matrix environment, driving oversight, strengthening the control environment, and leveraging data-driven insights to enhance risk management practices and decision making. Key Responsibilities: - Provide expert Regulatory Compliance support, guidance, and advice to T&O in support of the Enterprise Compliance Program (ECP) related to Technology. - Identify and communicate new and revised regulatory changes via the Enterprise Regulatory Development Framework (ERDF) and participate in execution of activities for implementation of Enterprise Compliance Program (ECP). - Contribute to the sound, efficient operation of T&O by improving the understanding and execution of Risk requirements in accordance with the Enterprise Operational Risk Management Framework (ORMF) related to technology. - Performance of risk assessments in accordance with ORMF and ECP requirements. - Maintain the T&O Process, Risk and Control (PRC) Framework, Tool, and Control Library to provide management a holistic view of the control environment - Manage oversight for all enterprise-level new/revised policies to determine T&O impact, including requests for review/feedback and communication of key policy changes - Leverage data to perform root cause and predictive analysis, and provide qualitative and quantitative risk and compliance management report. Core Knowledge: - At least 10+ years of Technology or Financial industry work experience with a graduate or post-graduate degree in computer science, engineering, information systems, math or business management - At least 5 years of experience in risk and compliance domain with an ability to analyze and evaluate the observations based on compliance, operations, risk model and performance. - Ability to review all written materials for compliance with state, federal, and contractual regulations and draft all policy language and is desired - Strong data analytics and presentation skills, including advance level fluency in using Excel, Word and PowerPoint and other data analytics dashboard tools. - Ability to communicate complex or detailed technical topics to a non-technical business audience, clearly conveying risk assessments, actions needed, and cost implications. - CRISC, CGEIT, CISA, CISM, PMP and/or Cloud compliance certification an asset - Good data analytics and reporting skills including advance excel and power point skills and skills to use desktop analytics tools. - Knowledge of software development practice, concepts/methodologies and technology obtained through formal training and/or work experience - Knowledge of data governance frameworks and how these are implemented in complex and large organizations. - Well versed in the technology issues affecting financial service organizations and cloud based application service providers - Understands the basic tenants of enterprise risk management process (Identify, assess, prioritize, treat and monitor). Contributes to the business’ accountability for the delivery of regulatory programs across applicable Tier 1 Risk Types. Contributes to the design of governance and control requirements for products, processes, and channels. Supports the design, development, automation, and coordination of evidence based controls across Credit & Counterparty, Non Financial, Liquidity & Funding, Market, Strategic, Reputation, and Environmental & Social Risks. Supports effective and efficient compliance with regulatory obligations in alignment with the Bank’s Risk Management Framework and approved Risk Appetite. - Makes recommendations to senior leaders on strategy and new init