Job Summary Location: 100 King Street West. Job Family Group: Audit, Risk & Compliance. This role is specific to managing Business Continuity and related resilience risk within the Enterprise. It is directly responsible for performing Second Line of Defense (2LOD) Risk Specialty Area (RSA) oversight activities for the Enterprise Business Continuity (EBCM) program. The Senior Manager provides independent review, effective challenge, and risk oversight of First Line Business Continuity, Disaster Recovery, and Crisis Management practices, ensuring alignment with enterprise risk appetite, regulatory expectations, and associated frameworks, standards, and policies. The role does not execute or own First Line programs or plans, but instead focuses on framework governance, output challenge, thematic risk assessment, risk reporting, and escalation of material concerns. This role requires a robust Business Continuity subject matter expert with demonstrated experience assessing the design and effectiveness of Business Continuity programs, recovery strategies, testing activities, and related resilience capabilities within a complex organization.
Key Responsibilities Key areas of involvement include but are not limited to: Independent review and challenge of Business Impact Analysis (BIA) outputs, recovery objectives (RTO/RPO), critical business services/processes, recovery strategies, and dependency assessments, including third-Party dependencies. Oversight of Business Continuity, Disaster Recovery, and Crisis Management planning and testing, including review of results, identified gaps, issue severity assessments, remediation plans, and sustainability of corrective actions. Participation in and challenge of scenario testing, IRSA, IAAP, Resolution & Recovery, and operational resilience activities, assessing whether outcomes appropriately address resilience risks and regulatory expectations. Monitoring of program execution, risk indicators, issues, and emerging resilience risks, with escalation of material concerns through established governance forums. Development of risk insights, thematic analysis, and management reporting that translate BCM program outcomes, testing results, issues,



and risk indicators into clear and actionable risk perspectives for senior management and governance committees. Contribution to quarterly RSA reporting, deep dive reviews, regulatory examinations, internal audit engagements, and audit-ready evidence of effective 2LOD oversight and challenge. This role partners closely with First Line Business Continuity, Disaster Recovery, Crisis Management, Technology Resilience, and Third-Party Risk teams to deliver independent oversight, effective challenge, and credible risk perspectives, while maintaining appropriate segregation of duties within the Three Lines of Defense model.
Provides oversight, monitoring and reporting on operational risks for a designated portfolio. Develops and monitors the operational management framework that includes the governance framework & practices leveraged across BMO to manage operational risks. Provides policies & standards, methodologies and controls that increase transparency, accuracy and consistency across groups. Works with stakeholders to implement the methodology, metrics and program standards for the assigned portfolio to ensure compliance as well as effective monitoring, timely reporting and identification of action plans. Provides strategic input into business decisions as a trusted advisor. Makes recommendations to senior leaders on strategy and new initiatives, based on an in-depth understanding of the business/group. Acts as a subject matter expert on relevant regulations and policies. May network with industry contacts to gain competitive insights and best practices. Interprets new regulations and assesses impacts to the governance framework. Develops reports on the status of the governance program or framework components to various internal & external stakeholder audiences. Influences and negotiates to achieve business objectives. Identifies emerging issues and trends to inform decision-making.



Recommends business priorities, advises on resource requirements and develops roadmap for strategic execution. Manages resources and leads the execution of strategic initiatives to deliver on business and financial goals. Measures the effectiveness of risk governance system and framework; recommends changes as required. Conducts independent analysis and assessment to resolve strategic issues. Leads the development and maintenance of the governance system and framework. Acts as the prime subject matter expert for internal/external stakeholders. Represents the model validation program / portfolio for internal/external regulatory audits and/or examinations. Ensures alignment between stakeholders. Designs and produces regular and ad-adhoc reports, and dashboards. Develops and manages comprehensive information management systems; designs and/or leads initiatives to improve processes, analysis and reporting. Defines business requirements for analytics & reporting to ensure data insights inform business decision making. Leads change management programs of varying scope and type, including readiness assessments, planning, stakeholder management, execution, evaluation and sustainment of initiatives. Leads the development of the communication strategy focusing on positively influencing or changing behaviour. Leads the execution of operational programs; assesses and adapts as needed to ensure quality of execution. Manages the review and sign-off process for relevant regulatory reporting. Leads and integrates the monitoring, measurement & reporting on the status of the operational risk governance program to internal & external stakeholders. Leads the management of governance meetings and maintenance of governing body mandates, oversight and approval guidelines. May provide specialized support for other internal and external regulatory requirements. Provides input into the planning and implementation of ongoing operational programs in support of the operational risk framework. Leads/participates in the design, implementation and management of core business/group processes. Administers and maintains operational risk program activities

#J-18808-Ljbffr

📌 Sr. Manager, Enterprise Business Continuity Risk Management (Ontario)
🏢 Bank of Montreal
📍 Ontario