[Hiring] Cyber Security Advisor @BMO

Role Description

As a Cyber Security Advisor, you will serve as a trusted partner to business and technology teams, helping them navigate cyber security requirements throughout the lifecycle of technology initiatives, application changes, infrastructure updates, data movement activities, and production deployments.

This role is focused on security advisory, coordination, governance, and stakeholder engagement rather than hands-on security operations, risk assessments/audits or engineering activities. You will provide guidance, coordinate reviews, validate supporting documentation and evidence, facilitate approvals, and connect stakeholders with the appropriate security experts when specialized expertise is required.

Success in this role comes from building strong relationships, effectively communicating security requirements, and helping teams navigate security processes while enabling successful business and technology outcomes.

Qualifications

• Typically between 4 - 7 years of relevant experience and a post-secondary degree in Information Security, Computer Science, Engineering, and/or Information Systems or a related field of study or an equivalent combination of education and experience.
• Preference for candidates who have at least one certification in a related field, with strong preference for Information security certifications from a well-recognized institution (e.g. (ISC)2, ISACA, SANS).
• Understanding of industry standards and frameworks e.g. NIST Cyber Security Framework (CSF), ISO 27001 and 27002, Payment Card Industry (PCI) Data Security Standard (DSS), etc. - In-depth.
• Experience in information security concepts and methodology.
• Knowledge of business analysis, project delivery practices and standards across the project lifecycle - In-depth.
• Knowledge of information security processes, procedures and controls - In-depth.
• Understanding of and problem solving ability for information security issues within their business group - Working.
• Understanding of information security risk and regulatory requirements - Working.
• Deep knowledge and technical proficiency gained through extensive education and business experience.
• Verbal & written communication skills - In-depth.
• Collaboration & team skills - In-depth.
• Analytical and problem solving skills - In-depth.
• Influence skills - In-depth.
• Data driven decision making - In-depth.

Requirements

• 3-5 years of experience reviewing technology, application, infrastructure, or production changes against established cyber security policies, standards, and control requirements.
• Knowledge of Cloud security, DevSec Ops, and Zero Trust.
• Knowledge of security information and event management (SIEM) and encryption.
• Strong knowledge of Firewalls, intrusion detection and prevention systems, data loss prevention solutions, endpoint protection, log aggregation, and other leading-edge security technologies.
• 3-5 years of experience validating security documentation, evidence, and control requirements as part of a security review, governance, audit, compliance, or approval process.
• 3-5 years of experience coordinating initiatives, tracking action items, monitoring progress, and supporting the implementation of security improvements.
• 3-5 years of experience providing cyber security guidance and recommendations to business and technology stakeholders.
• Working knowledge of industry-recognized cyber security frameworks and standards, including NIST Cybersecurity Framework (CSF) and ISO 27001/27002.
• Demonstrated ability to analyze security requirements and translate them into practical guidance for project, application, and technology teams.
• Strong communication, relationship-building, organizational, and problem-solving skills.

Benefits

• Health insurance
• Tuition reimbursement
• Accident and life insurance
• Retirement savings plans
• Performance-based incentives
• Discretionary bonuses
• Other perks and rewards