Managing Director Insider Threat Program

Address:

Leads the Banks enterprise insider threat program defining strategy governance and operating model to proactively identify assess mitigate and prevent insider-driven risk. Establishes a risk-based approach to insider threat strengthening the Banks ability to anticipate emerging threats close control gaps and enhance operational resilience. Maintains a forward-looking view of emerging insider risks including employee-enabled fraud credential misuse data exfiltration collusion third-party insider risk and cyber-enabled activity. The insider threat program is a centralized program requiring strict governance and confidentiality with only involving stakeholders on a need-to-know basis in a controlled escalation environment.

Strategy & Operating Model

• Defines and leads the enterprise insider threat strategy and long-term roadmap.

• Builds a consistent global framework aligned to regulatory legal privacy and labor requirements; regulatory first design.

• Establishes governance structures escalation protocols and decision-making forums.

• Matures capabilities from reactive investigations to proactive intelligence-led prevention.

Cross-Functional Leadership & Integration.

• Partners across Cybersecurity Fraud Financial Crimes Corporate Security Operations. Legal Global Investigations Risk Privacy and Human Resources.

• Integrates insider threat capabilities across systems platforms and control environments.

• Establishes clear routines for collaboration escalation and coordinated response.

• Promotes a culture of proactive risk identification and responsible escalation.

Data Analytics & Intelligence

• Develops and optimizes insider threat analytics (i.e. user and entity behavior analytics) tools and capabilities to support scalable intelligence-driven risk detection.

• Builds a consolidated insider threat intelligence capability integrating cyber fraud financial crime HR and investigative signals (data fusion).

• Delivers executive-level reporting and insights on insider threat posture emerging risks significant cases control effectiveness and remediation progress.

• Leverages data analytics and risk indicators to inform strategy prioritization and investment decisions.

Detection Investigation & Response

• Owns the end-to-end insider threat control framework including prevention rules risk-based detection models behavioral analytics investigative protocols case management standards and escalation processes.

• Embeds privacy-by-design and ethical monitoring practices ensuring transparency proportionality and protection of employee dignity.

• Develops and enhances intelligence-led detection capabilities and response frameworks to enable proactive risk identification and mitigation.

• Partners with Global Investigations to ensure that consistent triage investigation escalation and resolution related to Insider threat occurs across the enterprise.

• Defines standards for response actions ensuring timeliness proportionality governance and defensibility.

• Participates in complex high-risk investigations involving employees contractors third parties cyber events fraud activity and control breaches as required partnering with the Global Investigations team.

Governance Risk & Regulatory Oversight

• Identifies systemic control gaps and drives remediation across identity and access management privileged access data protection fraud controls vendor access and critical operations.

• Oversees adherence to the Banks Risk Appetite Framework ensuring insider threat risks are managed within defined tolerances.

• Defines and manages key risk indicators (KRIs) key performance indicators (KPIs) and insider treat risk appetite.

• Supports regulatory exams audits and governance reviews ensuring readiness and effective response across cyber risk fraud conduct risk and operational resilience

Leadership & Culture

• Within the mandate of this role promotes and supports the Banks risk culture including ensuring employees understand their accountabilities for risk-taking activities promoting an environment of open communication and effective challenge and establishing the tone from the top through leading by example.

• Complies with the Banks Risk Appetite framework and ensures risk-taking activities remain within agreed limits and comply with all regulatory requirements.

• Role models driving simplicity and productivity enhancements for optimization across groups driving continuous improvement on key measures.

• Activates our winning culture aligned with Purpose. Ignites engagement by aligning our culture to our strategy and fueling exceptional execution.

• Fosters an inclusive environment for all employees by eliminating barriers to inclusion.

• Develops leaders plans for succession and fosters a high-performance culture.

• Drives top talent acquisition and retention developing organizational capabilities to drive competitive advantage.

• Leads and mentors a team with diverse risk and business experience skills and orientation.

• Leads promotes and reinforces the Banks Ambition; personally role models One Bank leadership; drives sustainable improvements in customer loyalty and business growth; adheres and supports enterprise customer experience and brand standards.

Qualifications:

• 10 years in a global systemically important bank (GSIB) large financial institution intelligence agency law enforcement military or critical infrastructure environment.

• Experience in leading enterprise-side or global risk or security programs.

• Proven track record building or transforming insider threat cyber fraud or security capabilities.

• Deep experience managing complex investigations involving employees contractors third parties cyber incidents fraud activity or data misuse.

• Strong knowledge in one or more areas: insider threat cybersecurity fraud financial crime investigations operational risk or enterprise security.

• Understanding of banking operations conduct risk and financial crime typologies.

• Knowledge of regulatory expectations related to cyber fraud and operational resilience.

• Working knowledge of analytics detection models and insider threat tools.

• Ability to lead global distributed teams and build multidisciplinary capabilities.

• Strong leadership presence with the ability to influence senior stakeholders.

• High judgment and discretion in handling sensitive matters.

• Ability to translate complete risk signals into clear actionable insights.

• Preferred professional certifications such as Certified Information Systems Security Professional (CISSP) Certified Information Security Manager (CISM) Certified Fraud Examiner (CFE) Certified Anti-Money Laundering Specialist (CAMS) Certified Protection Professional (CPP) Global Information Assurance Certification (GIAC) Certified Information Systems Auditor (CISA) Certified in Risk and Information Systems Control (CRISC) or relevant investigations/intelligence credentials.

• Background in law enforcement intelligence or national security organizations (e.g. federal agencies or equivalent). Established external network across industry law enforcement and intelligence communities.

Please note: The position is targeted at a base range between $190K CDN and $225K CDN

The above represents BMO Financial Groups pay range and type.

Salaries will vary based on factors such as location skills experience education and qualifications for the role and may include a commission structure. Salaries for part-time roles will be pro-rated based on number of hours regularly worked. For commission roles the salary listed above represents BMO Financial Groups expected target for the first year in this position.

BMO Financial Groups total compensation package will vary based on the pay type of the position and may include performance-based incentives discretionary bonuses as well as other perks and rewards. BMO also offers health insurance tuition reimbursement accident and life insurance and retirement savings plans. To view more details of our benefits please visit: Us

At BMO we are driven by a shared Purpose: Boldly Grow the Good in business and life. It calls on us to create lasting positive change for our customers our communities and our people. By working together innovating and pushing boundaries we transform lives and businesses and power economic growth around the world.

As a member of the BMO team you are valued respected and heard and you have more ways to grow and make an impact. We strive to help you make an impact from day one for yourself and our customers. Well support you with the tools and resources you need to reach new milestones as you help our customers reach theirs. From in-depth training and coaching to manager support and network-building opportunities well help you gain valuable experience and broaden your skillset.

To find out more visit us at is committed to an inclusive equitable and accessible workplace. By learning from each others differences we gain strength through our people and our perspectives. Accommodations are available on request for candidates taking part in all aspects of the selection process. To request accommodation please contact your recruiter.

Note to Recruiters: BMO does not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to BMO directly or indirectly will be considered BMO property. BMO will not pay a fee for any placement resulting from the receipt of an unsolicited resume. A recruiting agency must first have a valid written and fully executed agency agreement contract for service to submit resumes.