BMO Financial Group seeks to hire a Manager for Central Testing Unit (CTU). CTU will drive the Testing & Evaluation of Information Security (IS) Controls in the Process, Risk & Controls (PRC) framework.
PRC is a set of key processes, risks and controls associated with the use and support of technology in the delivery of business objectives.
The candidate will be responsible to play a leadership role in the management of PRC framework, Testing of Design and Operating Effectiveness of IS controls.
The role requires working closely with the CTU Stakeholder community and IS 1A functions that are responsible for Design and / or Operations of IS controls.
Provide subject matter expertise in the interpretation and deployment of key Industry standards and regulatory requirements as contained within the PRC.
Play a lead role in the review, ongoing assessment and testing of IS controls in the PRC framework. This includes test preparation, test execution, providing recommendations and reporting on the status of the identified gaps / issues.
Accountable to effectively and proactively contribute to the success of CTU program through the coordination, consolidation, analysis, recommendations, and reporting
Play a key role in developing capability to provide CTU inputs that are required for regulatory reporting and audit queries
Lead in the collection / consolidation of CTU related data to be utilized for management and executive communications, including presentations, organizational program support, and communications between teams
Perform communication, make recommendations or escalations to management of CTU changes or updates as per established management reporting guidelines
Ensure testing lifecycle is implemented in a timely & consistent manner
Provide leadership and direction by setting context, defining accountabilities, tasks and assignments
Coach, motivate, develop and evaluate performance of subordinates and provide guidance and mentoring in the resolution of complex issues
Pre-requisites / Qualifications :
University degree / college diploma or equivalent work experience
At least one professional Information Security Certifications (i.e. CISSP / CISM / CISA)
At least 10 years experience in Information Security management reporting processes and methodology
Good understanding of Information Security standards and frameworks is preferred, such as ISO 27001, ISO 27002 (2013), NIST CSF, NIST 800-
53, COBIT 5, ITIL, BITS SIG Lite, FFIEC, GLBA, PCI DSS, and others
Strong foundation in Information Security processes, procedures, controls, reporting, risk and regulatory requirements
Strong technical knowledge of data processing and IT security arrangements
Ability to work independently and multi-task in a fast-paced environment
Ability to communicate and present effectively through a range of mediums, to various audiences, in a way that demonstrates subject-
matter knowledge, facilitates comprehension, and inspires appropriate action
Exceptional and proven leadership capabilities communication, conflict resolution, people management, relationship management (internally / externally), and multitasking
Advanced level of conceptual and strategic thinking with strong problem management skills
Ability to act with the highest integrity in ambiguous situations and conflicts
Experience in managing projects and using project management skills is desired
Possesses expert communication skills, both written and verbal
Strong collaboration skills
Demonstrates expert leadership skills and capabilities
Displays high ethics and trust values
Ability to operate effectively in a matrix environment