Risk Governance & Controls Specialist

Address:

This role offers a strong opportunity to build deep expertise at the center of Commercial governance and control design. The individual will play a visible and trusted role partnering with stakeholders across Commercial to strengthen the integrity, clarity, and consistency of the Process, Risk & Control (PRC) library. Through hands‑on engagement with the business and close collaboration with 2nd Line partners, this position provides meaningful exposure to risk management practices, control design standards, and enterprise governance expectations, while developing strong stakeholder management and subject matter expertise.

Develops and maintains an effective internal control framework that defines the ways and methods governance is implemented, managed, and monitored in the designated business/group portfolio. The governance framework includes policies, guidelines and provides programs, practices and measures to promote transparency, accuracy, consistency across groups. Applies specialized knowledge of risk management and internal controls related to business processes and information.

• Is relied upon as a subject matter expert for the PRC library, maintaining deep knowledge of the control inventory to advise stakeholders on existing controls, control coverage, and alignment to risks and processes..
• Partners with stakeholders across Commercial to identify, document, and maintain controls within the PRC library.
• Ensures each control is clearly documented using the 5Ws (Who, What, When, Where, Why), with sufficient precision to support consistency, transparency, and effective testing.
• Identifies and documents the end‑to‑end process and risk(s) each control is designed to mitigate.
• Confirms and documents the control owner and central point of contact accountable for ongoing execution and maintenance.
• Develops and maintains control test scripts aligned to control design, execution, and risk intent.
• Works closely with 2nd Line Risk and Compliance partners to support effective challenge, review, and refinement of controls and related test scripts.
• Leads or assists with the maintenance, monitoring, measurement & reporting on the status of the internal controls governance framework/program to various internal & external stakeholder audiences.
• Develops tools, checklists and communications to address gaps, issues and new requirements.
• Utilizes enterprise-wide Operational Risk systems and tools for analysis, forecasting and management reporting
• Supports development and execution of strategic initiatives in collaboration with internal and external stakeholders.
• Develops governance and control-related solutions and makes recommendations based on an understanding of the business strategy and stakeholder needs.
• Provides advice and guidance to assigned business/group on the implementation of the control framework, including effective challenge.
• Builds effective relationships with internal/external stakeholders.
• Ensures alignment between stakeholders.
• Breaks down strategic problems, and analyses data and information to provide insights and recommendations.
• Participates in defining the communication plan designed to positively influence or change behavior; develops tailored messaging; and identifies appropriate distribution channels.
• Supports change management of varying scope and type; tasks typically focused on execution and sustainment activities.
• Leads or assists in the execution of oversight/governance activities.
• Reviews processes and identifies opportunities for risk mitigation through proposing new controls or revising existing controls.
• Identifies where corrective actions are required and escalates per guidelines; ensures corrective action is taken as necessary.
• Coordinates and participates in the execution of oversight/governance activities including reporting; assessment of education & training needs, development/delivery of training; development and execution of regulatory administration processes & procedures; management of review/updates to policies, etc.
• Consults with stakeholders to improve consistency and transparency of control measurement/metrics and reporting.
• Assists with the interpretation of new or changing regulations and assessing impacts to the governance frameworks.
• Develops and maintains in-depth knowledge of business and related risk management requirements and legislative/regulatory directives and guidance.
• Analyzes data and information to provide insights and recommendations.
• Documents the internal control governance system, processes and framework to describe compliance requirements, activities, processes, roles & responsibilities.
• Monitors and tracks performance; addresses any issues.
• Focus is primarily on business/group within BMO; may have broader, enterprise-wide focus.
• Exercises judgment to identify, diagnose, and solve problems within given rules.
• Works independently on a range of complex tasks, which may include unique situations.
• Broader work or accountabilities may be assigned as needed.

Qualifications:

• Typically between 4 - 6 years of relevant experience and post-secondary degree in related field of study or an equivalent combination of education and experience.
• Experience in risk management, audit, compliance, governance and/or project management is preferred.
• In-depth knowledge of business and regulatory environment.
• In-depth knowledge & experience with risk policy frameworks; quality control/testing frameworks. e.g. SOX 404, COBIT and COSO frameworks.
• Technical proficiency gained through education and/or business experience.
• Verbal & written communication skills - In-depth.
• Collaboration & team skills - In-depth.
• Analytical and problem solving skills - In-depth.
• Influence skills - In-depth.
• Data driven decision making - In-depth.

The above represents BMO Financial Group’s pay range and type.

Salaries will vary based on factors such as location, skills, experience, education, and qualifications for the role, and may include a commission structure. Salaries for part-time roles will be pro-rated based on number of hours regularly worked. For commission roles, the salary listed above represents BMO Financial Group’s expected target for the first year in this position.

BMO Financial Group’s total compensation package will vary based on the pay type of the position and may include performance-based incentives, discretionary bonuses, as well as other perks and rewards. BMO also offers health insurance, tuition reimbursement, accident and life insurance, and retirement savings plans. To view more details of our benefits, please visit: https://jobs.bmo.com/global/en/Total-Rewards

About Us

At BMO we are driven by a shared Purpose: Boldly Grow the Good in business and life. It calls on us to create lasting, positive change for our customers, our communities and our people. By working together, innovating and pushing boundaries, we transform lives and businesses, and power economic growth around the world.

As a member of the BMO team you are valued, respected and heard, and you have more ways to grow and make an impact. We strive to help you make an impact from day one – for yourself and our customers. We’ll support you with the tools and resources you need to reach new milestones, as you help our customers reach theirs. From in-depth training and coaching, to manager support and network-building opportunities, we’ll help you gain valuable experience, and broaden your skillset.

To find out more visit us at https://jobs.bmo.com/ca/en.

BMO is committed to an inclusive, equitable and accessible workplace. By learning from each other’s differences, we gain strength through our people and our perspectives. Accommodations are available on request for candidates taking part in all aspects of the selection process. To request accommodation, please contact your recruiter.

Note to Recruiters: BMO does not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to BMO, directly or indirectly, will be considered BMO property. BMO will not pay a fee for any placement resulting from the receipt of an unsolicited resume. A recruiting agency must first have a valid, written and fully executed agency agreement contract for service to submit resumes.