BMO is seeking a security architect to join our a highly skilled team of security professionals responsible for providing security design, patterns, and guidance for BMO’s business and technology initiatives.

As a Cyber Solution Architect at BMO, you will develop long-term cyber security strategies and roadmaps, using architecture methodologies and security frameworks, to strengthen the Bank’s overall information security posture. In addition, you will participate in the development of the bank’s security architecture and partner work with our business and technology partners on broader enterprise architecture efforts.

Key Responsibilities:

Work cross-functionally to assess risk and help deliver countermeasures that protect customer and bank data.
Analyze and recommend security controls and procedures in the acquisition, development, and change management lifecycle of information systems.
Use industry standard security architecture frameworks to ensure security controls are well integrated and meet the quality attributes of confidentiality, integrity, and availability.
Support BMO’s digital banking journey leveraging native cloud services.
Represent cyber architecture in various technology governance committees and boards.
Key Duties:
Provide technical security leadership to various enterprise and cloud related projects that you are engaged on.
Partner directly with technology and engineering on the identification, development, and review of enterprise design patterns.
Coach and mentor teams to incorporate security into enterprise and customer-facing applications
Influence the security product roadmap, working directly with our business and technology stakeholders.
Identify and communicate current and emerging security threats to the organization.
Maintain awareness of new security technologies in the market and consult on these with senior leadership.

Provides management consulting services and technology/industry expertise in support of business and enterprise needs. Liaises with stakeholders to understand problems and opportunities, to facilitate the organization's goals by understanding business vision, objectives, and key performance indicators. Aligns technology requirements and solutions to a real business need, meets essential quality standards, and ensures approval by all relevant stakeholders. Acts as a consultant to business partners in collaboration with the project team in strategy and planning sessions (e.g. multi-year and annual plans), reviews, or inspections to ensure the quality of work products. Promotes new processes and methodologies, emerging technologies, and agile, and aligns to the unique project team requirements.

Provides thought leadership in the development of new ideas, processes and emerging technology.
Provides strategic input into business decisions as a trusted advisor.
Acts as a subject matter expert on relevant regulations and policies.
Identifies emerging issues and trends to inform decision-making.
Recommends business priorities, advises on resource requirements and develops roadmap for strategic execution.
Leads the development of IT strategy by understanding business processes, policies, information and information systems.
Acts as the prime subject matter expert for internal/external stakeholders.
Defines business requirements for analytics and reporting to ensure data insights inform business decision making.
Breaks down strategic problems, and analyses data and information to provide insights and recommendations.
Leads change management programs of varying scope and type, including readiness assessments, planning, stakeholder management, execution, evaluation and sustainment of initiatives.
Leads the development of the communication strategy focusing on positively influencing or changing behaviour.
Presents and communicates at all levels within IT and across businesses / groups.
Completes root-cause analysis to determine underlying causes and participates in problem resolution for complex issues at all levels.
Identifies opportunities to strengthen the IT consulting capability (e.g. shares expertise to promote technical development, mentors employees, builds communities of practice and networks across technology).
Understands and follows a project requirements management plan so that activities and milestones of the project team can be measured against the goals of the plan.
Facilitates discussions and follows a disciplined approach to plan, elicit, analyze, document, communicate, and manage business requirements with stakeholders; applies a variety of elicitation techniques to probe, challenge, and understand requirements.
Provides analytical support and insights to identified / assigned user areas to support relative product, channel, and business development initiatives (e.g. product, portfolio, and profitability analytics, and customer analytics).
Collaborates in root-cause analysis to determine underlying causes and participates in problem resolution.
Builds exceptional relationships with internal and external stakeholders.
Liaises with the business and the technology development and support groups.
Aligns business needs to vision/goals to ensure development teams to translate them into detailed design specifications and code.
Assess project impact, benefits, and risks when scope changes.
Communicates and engages across stakeholder groups during construction and delivery of solutions.
Assesses the quality of supporting documentation, including business and process requirements documents, to ensure proper analysis supports recommendations or demonstrate continued alignment to strategic objectives.
Develops a deep understanding of organizational complexity to build strong rapport with internal stakeholders for the construction and delivery of the solution.
Stays abreast of industry technical and business trends through benchmarking and/or participation in professional associations.
Operates at a group/enterprise-wide level and serves as a specialist resource to senior leaders and stakeholders.
Applies expertise and thinks creatively to address unique or ambiguous situations and to find solutions to problems that can be complex and non-routine.
Implements changes in response to shifting trends.
Broader work or accountabilities may be assigned as needed.

Qualifications:

Typically 7+ years of relevant experience and post-secondary degree in related field of study or an equivalent combination of education and experience.
Candidate should have 7-10+ years of experience as a security architecture and/or engineer with at least 3-5+ years focused on application security architecture.
CISP, CCSP, ISC2 designations a definite asset.
Excellent understanding of application security architecture best practices and principles, enterprise architecture and patterns
Excellent understanding of API security best practices
Excellent understanding of common data protection technologies (this includes implementation), such as Cryptography, Tokenization, Hashing, etc.
Strong knowledge of network security protocols and best practices
Strong knowledge of Threat modeling and Risk Assessment methodologies and/or frameworks
Understanding of Azure/AWS native security services and security best practices
Experience in the financial sector would be preferred
Seasoned professional with a combination of education, experience and industry knowledge.
CISSP, TOGAF certification
Business Analysis Accreditation is an asset.
Knowledge of software development practice, concepts/methodologies (i.e. waterfall, Agile, iterative), and technologies obtained through formal training and/or work experience.
Knowledge of one or more requirements analysis and problem decomposition techniques.
Knowledge of technical/business environment (e.g. Microsoft business technologies and applications, relational databases, and SharePoint).
Understanding of industry standards and standard business capabilities.
Knowledge of business analysis, project delivery practices and standards across the project lifecycle.
Possesses a deep understanding and problem solving ability of Information Technology of various complexities.
Understanding of techniques associated with data modeling, process modeling, and user-centered design within the context of the organizational standards.
Familiar with business strategy and assessments (i.e. feasibility studies, business cases and/or cost/benefit, project sizing and costing, and current state analysis/needs assessments).
Seasoned professional with a combination of education, experience and industry knowledge.
Verbal & written communication skills - In-depth / Expert.
Analytical and problem solving skills - In-depth / Expert.
Influence skills - In-depth / Expert.
Collaboration & team skills; with a focus on cross-group collaboration - In-depth / Expert.
Able to manage ambiguity.
Data driven decision making - In-depth / Expert.

We’re here to help

At BMO Harris Bank we are driven by a shared Purpose: Boldly Grow the Good in business and life. It calls on us to create lasting, positive change for our customers, our communities and our people. By working together, innovating and pushing boundaries, we transform lives and businesses, and power economic growth around the world.

As a member of the BMO Harris Bank team you are valued, respected and heard, and you have more ways to grow and make an impact. We strive to help you make an impact from day one – for yourself and our customers. We’ll support you with the tools and resources you need to reach new milestones, as you help our customers reach theirs. From in-depth training and coaching, to manager support and network-building opportunities, we’ll help you gain valuable experience, and broaden your skillset.

To find out more visit us at https://jobs.bmoharris.com

BMO Harris Bank is committed to an inclusive, equitable and accessible workplace. By learning from each other’s differences, we gain strength through our people and our perspectives. BMO Harris Bank N.A. is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. Accommodations are available on request for candidates taking part in all aspects of the selection process. To request accommodation, please contact your recruiter.

Note to Recruiters: BMO Harris Bank does not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to BMO Harris Bank, directly or indirectly, will be considered BMO Harris Bank property. BMO Harris Bank will not pay a fee for any placement resulting from the receipt of an unsolicited resume. A recruiting agency must first have a valid, written and fully executed agency agreement contract for service to submit resumes.

BMO US

New Jobs

Cyber Solution Architect