Chief Cybersecurity & Core Tech Audit Leader

Bank of Montreal; San Ramon (CA); On-site; USD 200,000 - 260,000; Full time

Benefits offered by this job

Health insurance

Tuition reimbursement

Accident and life insurance

Retirement savings plans

Job summary

Bank of Montreal seeks a senior technology audit leader to shape risk-based coverage across Cybersecurity and Core Technology. You will guide testing priorities, collaborate with CFO/CIO leaders, and drive analytics-enabled auditing to deliver enterprise-wide risk insights.

The role requires 15+ years of experience in internal/tech audit within financial institutions, with strong regulatory engagement and leadership capabilities.

Qualifications

• 15+ years of experience in Internal Audit, Technology Audit, Cybersecurity, or Risk Management within large financial institutions
• Senior leadership experience overseeing complex technology domains, including cybersecurity, infrastructure, cloud, engineering, technology operations, and operational resilience
• Deep expertise in cybersecurity, technology infrastructure, engineering practices, service management, operational resilience, and technology risk management, with proven ability to lead integrated audit programs across multiple risk domains
• Strong experience engaging regulators and executive stakeholders (CIO, CISO, regulators)
• Demonstrated track record of driving audit transformation (analytics, automation, continuous auditing)
• Experience leading geographically dispersed teams, building and scaling high-performing teams, including capability uplift in specialized domains
• Strong understanding technology risk management and emerging risks, including artificial intelligence, AI-enabled threats, quantum computing implications, technology transformation, evolving regulatory expectations, and advanced supply chain dependencies
• One or more professional certifications in information systems audit, cybersecurity, or technology risk management required (e.g., CISA, CISSP)
• Additional certifications in cloud platform/security, cybersecurity, network security, service management, or resilience preferred (e.g., CISM, CCSP, CCSK, GIAC, ITIL)

Responsibilities

• Define and execute a risk-based, integrated audit strategy across Cybersecurity and Core Technology that focuses on both current and future focused emerging risk reviews
• Lead ongoing risk assessment activities and development of audit coverage strategies to provide independent assurance over Cybersecurity and Core Technology risks, control effectiveness, and risk management practices.
• Strengthen audit capabilities across Cybersecurity and Core Technology through workforce planning, technical specialization, succession management, methodology enhancement, and targeted capability development in cyber, cloud, infrastructure, engineering, and technology operations risk domains.
• Maintain integrated, risk-based audit coverage across cybersecurity, engineering, technology operations, service management, platform support, cloud, infrastructure, software delivery, operational resilience, and third-party ecosystems, with a focus on identifying systemic risks, enterprise-wide control dependencies, and emerging technology risks.
• Proactively build partnerships across business, technology, control, and audit teams to support effective risk management, issue remediation, and sustainable control environment
• Serve as the senior audit relationship lead for technology executives, including CISOs, engineering, infrastructure, and operations leaders, while maintaining strategic partnerships with regulators, control functions, and other key stakeholders
• Lead audit support for regulatory examinations, horizontal reviews, regulatory commitments, and remediation activities related to Cybersecurity and Core Technology
• Ensure audit insights, thematic observations, and risk perspectives are communicated effectively to executive management and the Board
• Provide strategic leadership and performance oversight of Directors responsible for portfolio execution and identify opportunities to strengthen ownership and risk alignment while expanding control-level, domain-specific coverage
• Ensure quality, consistency, and timeliness of audit delivery through standardized methodologies, reusable testing approaches, and continuous improvement practices
• Establish proactive audit engagement and continuous monitoring across portfolios to enable real-time reprioritization and end-to-end risk visibility
• Drive adoption of analytics, continuous assurance, and AI-enabled auditing (e.g., AI-enabled threats, advanced cyber risks) for better forward-looking risk insights
• Deliver thematic insights, root-cause analysis, and enterprise-wide risk perspectives across technology domains
• Within the mandate of this role, promotes and supports the Bank’s risk culture including ensuring employees understand their accountabilities for risk-taking activities, promoting an environment of open communication and effective challenge, and establishing the “tone from the top” through leading by example
• Takes measured risks while protecting the bank by applying our Risk Management Framework in the execution of your role, in line with our Risk Culture and within our approved Risk Appetite, making sound and risk informed decisions that align to business strategy, protect assets, and adhere to applicable policy documents (Frameworks, Policies, Standards, Procedures and Supporting documents), laws and regulations

Skills

Cybersecurity

Technology risk management

Leadership

Regulatory engagement

Auditing

Cross-functional collaboration

Strategy development

Analytics

Team development

Executive communication

Education

CISA

CISSP

Cloud security certifications e.g., CCSK

Tools

AI-enabled auditing

Analytics platforms

Job description

Bank of Montreal seeks a senior technology audit leader to shape risk-based coverage across Cybersecurity and Core Technology. You will guide testing priorities, collaborate with CFO/CIO leaders, and drive analytics-enabled auditing to deliver enterprise-wide risk insights.

The role requires 15+ years of experience in internal/tech audit within financial institutions, with strong regulatory engagement and leadership capabilities.