Associate Director, Technology Controls Testing

The mandate of the Central Testing Utility (CTU) is to lead effective control design and operating effectiveness across Technology and Operations (T&O), through sustainable processes and interactions across enterprise technology, all lines of defense and regulators, in order to operate within BMO’s established risk appetite threshold to support operational excellence and strategic growth.

The Central Testing Utility (CTU) function mandate is to own the assessment of technology controls, assess adherence to the PRC framework and drive planning and execution of technology control testing.

The Testing Associate Director function lead will oversee the assessment and testing of technology controls for the following PRC framework components: Governance, Strategic Management, Information Security, Application and Infrastructure development, Service Delivery and Service Support via automation and data analysis. The function lead will make recommendation on changes to PRC framework based on the learnings from internal IT control testing. The lead’s mandate also includes developing new capabilities in the function and implementing new tools and processes, as required to support and help execute the TBCG’s mandate.

Specifically this role will:

Play a leadership role in the review, ongoing assessment and testing of internal controls related to BMO’s Technology PRC framework. This includes controls test preparation, test execution and providing recommendations on the status of the controls and issues under test. Demonstrate leadership through expert knowledge and understanding of the bank’s PRC framework, methodologies and processes. Guide the function on best practices relating to PRC framework. Support the analysis of issues and risks to identify root causes, triggers and help understand the complete regulatory impact. Respond to the queries from Corporate Audit Division (CAD), and 2nd line, as needed, in the context of PRC testing.

Function Leadership:

• Provide leadership in development of applicable policies, procedures, processes, and training programs to facilitate compliance with risk requirements.
• Champion and promote a technology risk management culture within the function and at a broader organization level. Thoroughly understand BMO’s technology risk profile and risk appetite.
• Establish annual goals and objectives for areas of accountability, and articulate the execution plan. Contribute to the strategic planning process with the CTU Testing Director.

Operations Management:

• Develop innovative approaches to creating solutions to resolve problems and significant issues within the function.
• Ensure there is appropriate alignment conducive to effective interactions within the CTU and other areas in the bank.

General Management:

• Identify training, development needs; create and implement appropriate development plans, including monitoring, documenting and providing regular feedback on performance.
• Actively challenge the status quo to find new ways of doing things, looking for best practices and continuous improvement opportunities.
• Build and maintain a high performing team by establishing a culture and work environment that attracts, retains and motivates a diverse, skilled workforce in order to maintain a high degree of employee professionalism, commitment and desire to maintain updated skills and knowledge.

PRC Evaluation & Testing function:

• Demonstrate expertise in dealing with technology organization, other CTU functional leads, and key stakeholders (Risk Management, Compliance) on topics related to PRC framework.
• Supervise testing of key technology controls on an annual basis, ensure that test results are documented, verifiable, transparent, re-performable and provide the assurance that technology controls are designed and operating effectively.
• Provide advice on PRC framework, based on learnings from testing and as it applies to the technology organization.

Knowledge:

• Demonstrated industry and regulatory knowledge gained through experience and relationships.
• Demonstrated time management and organizational skills with the ability to prioritize and manage multiple initiatives in order to meet deadlines while ensuring high quality of work produced.
• Excellent team player with demonstrated relationship management skills and a strong ability to make things happen through the use of positive influence.
• Strong understanding of technology and risk management organization, landscape and disciplines.
• Proven experience in leading a 5-10 member team.
• Solid understanding of control frameworks and test execution leveraging global resource pool.
• Advanced facilitation, influence management, consensus building, presentation skills and the ability to present to senior management and executive audiences.
• Superior communication (written, oral and presentation) skills with the ability to understand complex information and summarize in a clear, concise fashion.
• Strong understanding and command over internal controls testing requirements.
• Clear-thinking with the ability to consistently deliver high quality work under pressure with the ability to act fast, within tight time frames and limited direction.
• Commanding understanding of Internal Controls framework related to Technology.
• Ability to manage competing priorities and set expectations to ensure that all stakeholders are considered.
• Strong understanding of the banking industry risk appetite, policy, reporting structure, procedures and processes.

Skills:

• People manager skills and experience in building effective teams
• Excellent ability to understand, describe, and navigate existing work, organization and power structures, and make recommendations with a clear sense of organizational impact.
• Critical thinking, ability to capture enterprise view and team building skills.
• Strong leadership, strategic and planning ability.
• Ability to apply best practices and effectively manage emerging risks.
• Excellent conceptualization, presentation and communication skills in working with senior executives, managers, auditors and regulators.
• Ability to conceptualize and implement appropriate tools and templates for control testing.

Qualifications:

• 7 or more years of IT experience in Financial Services Industry highly preferred.
• Proven and demonstrated experience to manage a large team.
• One or more of CISA, CPA/CA, CIA and CISSP designation would be an asset.
• 10 or more years of Controls and Process testing experience.
• Advanced knowledge of Controls Audit is as asset.
• Advanced knowledge of Process Risk and Control frameworks.
• Bachelor’s or Master’s Degree or equivalent work experience.

We’re here to help

At BMO Harris Bank we are driven by a shared Purpose: Boldly Grow the Good in business and life. It calls on us to create lasting, positive change for our customers, our communities and our people. By working together, innovating and pushing boundaries, we transform lives and businesses, and power economic growth around the world.

As a member of the BMO Harris Bank team you are valued, respected and heard, and you have more ways to grow and make an impact. We strive to help you make an impact from day one – for yourself and our customers. We’ll support you with the tools and resources you need to reach new milestones, as you help our customers reach theirs. From in-depth training and coaching, to manager support and network-building opportunities, we’ll help you gain valuable experience, and broaden your skillset.

To find out more visit us at https://jobs.bmoharris.com

BMO Harris Bank is committed to an inclusive, equitable and accessible workplace. By learning from each other’s differences, we gain strength through our people and our perspectives. BMO Harris Bank N.A. is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. Accommodations are available on request for candidates taking part in all aspects of the selection process. To request accommodation, please contact your recruiter.

Note to Recruiters: BMO Harris Bank does not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to BMO Harris Bank, directly or indirectly, will be considered BMO Harris Bank property. BMO Harris Bank will not pay a fee for any placement resulting from the receipt of an unsolicited resume. A recruiting agency must first have a valid, written and fully executed agency agreement contract for service to submit resumes.