Cyber Security Advisor

Job not on LinkedIn

🔥 16 minutes ago

🇨🇦 Canada – Remote

💵 $80k - $175k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

BMO U.S.

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

🛡️ Insurance

💼 Consulting

📦 Logistics

Insurance • Consulting • Logistics

BMO U. S. is a diversified financial services company operating in the United States. It offers a broad range of financial products and services including personal and business banking, mortgage services, investments, financial planning, insurance, and wealth management. Additionally, it provides commercial loans, commercial mortgages, and other financial solutions tailored for small businesses and large enterprises. The company places a strong emphasis on customer service and offers digital and cross-border banking solutions to meet the needs of diverse clients. BMO U. S. is also involved in asset management and capital markets operations, making it a full-service financial institution.

📋 Description

• Serve as a trusted cybersecurity partner to business and technology teams throughout technology initiative, application change, infrastructure update, data movement, and production deployment lifecycles • Liaise among business stakeholders, application teams, infrastructure teams, and cybersecurity subject matter experts • Review application architectures, development patterns, authentication, authorization, data handling, and integration patterns • Identify cybersecurity risks across custom-built, SaaS, and third-party applications and define practical remediation plans • Recommend security controls aligned with BMO policies and standards • Review security products and technologies to ensure they protect systems and information and support organizational objectives • Validate security documentation, evidence, and control requirements • Coordinate security reviews, approvals, initiatives, action items, and implementation of security improvements • Provide information security consulting, guidance, advice, and recommendations to business and group leaders • Develop and support information security strategies and strategic plans • Build relationships with internal and external stakeholders and influence outcomes • Act as day-to-day vendor contact and support vendor solution implementation, maintenance, and sustainment • Track metrics and milestones, recommend resolutions, and escalate issues as appropriate • Facilitate stakeholder discussions and manage initiatives and issues using elicitation techniques • Promote process improvements, methodologies, emerging technologies, and information security best practices • Create and deliver concise professional presentations • Assess information security impacts of project scope changes • Gather, analyze, and interpret data to provide insights and actionable recommendations • Support continuous improvement and root cause analysis • Apply BMO’s Risk Management Framework and make risk-informed decisions aligned with policies, laws, regulations, and risk appetite

🎯 Requirements

• 3-5 years of experience reviewing technology, application, infrastructure, or production changes against established cybersecurity policies, standards, and control requirements • Knowledge of cloud security, DevSecOps, Zero Trust, SIEM, encryption, firewalls, intrusion detection and prevention systems, data loss prevention, endpoint protection, and log aggregation • 3-5 years of experience validating security documentation, evidence, and control requirements in security review, governance, audit, compliance, or approval processes • 3-5 years of experience coordinating initiatives, tracking action items, monitoring progress, and supporting security improvements • 3-5 years of experience providing cybersecurity guidance and recommendations to business and technology stakeholders • Working knowledge of NIST Cybersecurity Framework and ISO 27001/27002 • Ability to analyze security requirements and translate them into practical guidance • Strong communication, relationship-building, organizational, and problem-solving skills • Typically 4-7 years of relevant experience • Post-secondary degree in Information Security, Computer Science, Engineering, Information Systems, or related field, or equivalent combination of education and experience • Preference for at least one related certification, with strong preference for recognized information security certifications from ISC2, ISACA, or SANS • In-depth understanding of NIST CSF, ISO 27001/27002, PCI DSS, and related industry standards • In-depth information security concepts and methodology • In-depth knowledge of business analysis and project delivery practices across the project lifecycle • In-depth knowledge of information security processes, procedures, and controls • Working understanding of information security issues, risk, and regulatory requirements • In-depth verbal and written communication, collaboration, analytical and problem-solving, influence, and data-driven decision-making skills • Deep knowledge and technical proficiency gained through extensive education and business experience

🏖️ Benefits

• Performance-based incentives • Discretionary bonuses • Health insurance • Tuition reimbursement • Accident and life insurance • Retirement savings plans • In-depth training and coaching • Manager support • Network-building opportunities • Tools and resources to reach new milestones • Accommodations available on request for candidates taking part in all aspects of the selection process