Cyber & Technology Risk MD — Strategic Risk Leader

Bank of Montreal; Chicago (IL); On-site; USD 220,000 - 260,000; Full time

Benefits offered by this job

Health insurance

Tuition reimbursement

Life insurance

Retirement savings plans

Job summary

Bank of Montreal seeks a Managing Director for Cyber & Technology Risk to lead independent oversight of cyber and technology risk across the enterprise. The role focuses 80% on cybersecurity and 20% on broader tech risk, guiding risk standards and maturity across functions in North America.

Leading a six-person team, you will provide credible challenge, strategic risk insight, and timely reporting to senior executives and risk committees, while evolving risk analytics and regulatory alignment.

Qualifications

• Undergraduate degree required; professional certifications (CISSP, CCSP, AWS CCP) beneficial.
• 15+ years of cybersecurity experience with at least five years of managing a team and influencing management and stakeholders.

Responsibilities

• Provide independent oversight and challenge across cyber and technology risk.
• Lead governance and reporting for Technology and Cyber Risk to executives and board committees.
• Develop and maintain risk models and KPIs/KRIs to measure program effectiveness.
• Mentor junior team members and collaborate with ERPM and other lines of business.

Skills

Cybersecurity risk management

Leadership and people management

Strategic risk oversight

Regulatory and risk governance

Independent challenge and review

Education

Undergraduate degree

Certifications such as CISSP/CCSP/AWS CCP beneficial

Job description

Bank of Montreal seeks a Managing Director for Cyber & Technology Risk to lead independent oversight of cyber and technology risk across the enterprise. The role focuses 80% on cybersecurity and 20% on broader tech risk, guiding risk standards and maturity across functions in North America.

Leading a six-person team, you will provide credible challenge, strategic risk insight, and timely reporting to senior executives and risk committees, while evolving risk analytics and regulatory alignment.