Senior Data, Ai & Analytics Risk Strategy & Policy Officer

02/22/2024

Address:

100 King Street West

Audit, Risk & Compliance

As the Senior Data, AI &Analytics Risk Strategy & Policy Officer, you will be a key player in our second-line risk oversight function. Your role will involve independently overseeing the entire spectrum of activities related to data management, retention, and AI risk. You will specialize in data risk, AI risk, and analytics, contributing to the development of our robust risk program. We're seeking a strategist who understands the intricate dance between risk and technology.

Key Responsibilities:

- Maintain and evolve the AI risk policy framework, ensuring it aligns with industry standards and regulations and BMO's corporate objectives.

- Leverage your strong risk management background to oversee and challenge activities across the enterprise related AI activities across BMO, ensuring the cross impacts from data risk, and other risk stripes are considered, providing strategic insights for responsible AI practices

- Communicate effectively with stakeholders, ensuring a clear understanding of risk policies, maintaining strong executive relationships, as well as seamlessly translating complex AI concepts into business language.

- Showcase your technical expertise in AI development, data management or system implementation to integrate risk controls effectively.

- Demonstrate diligence, attention to detail, and the ability to manage information flow in a corporate environment.

What We're Looking For:

- A minimum of 7 years in operational environments, with a strong background in risk management, policy framework management, or review..

- Project management and AI/system development experience

- Relevant certifications including CIA, CISA or CRISC, internal audit certification, or project management credentials. AI/system development experience are considered a plus but not mandatory.

- A meticulous leader, managing information flow and maintaining documentation with diligence.

- Business Acumen- Ability to understand corporate expectations, ensuring the seamless integration of risk policies within our operational environment..

This position is located in Toronto and offers a hybrid work arrangement with at least 2-3 days per week on-site (including mandatory office day on Tuesdays) while other days remote.

If you're looking for your next dream job, consider this one in BMO's Enterprise Risk Group where every colleague helps protect and grow the bank by providing independent review and oversight of enterprise-wide risks, working together to maintain a risk management framework and fostering a strong risk culture.#ERPMDreamJobs

The Senior Data, AI &Analytics Risk Strategy & Policy Officer will be responsible for setting strategies and policies for Data Risk, AI Risk and Analytics risk as the risk governance frameworks quickly evolve to meet regulatory expectations and drive further definition of the enterprise guard-rails for these risk domains. This role is accountable for ensuring the risk policies and 2nd line frameworks continue to evolve to meet the evolving risk landscape, stakeholder engagement to achieve consensus and understanding of the risk requirements, to key stakeholders across the Enterprise, and ensure the policy and risk framework changes are integrated into the 1st and 2nd line frameworks and programs.

The role must be have sufficient technical acumen to be able to understand and identify horizontal risks as frameworks intersect with each other (i.e., data, tech, AI and analytic risk processes) with other related BMO processes (3rd party, process transaction, cyber, compliance, etc.) to ensure the key intersection points with unique risks are considered and designed into the risk framework for mitigation. Attention to detail, ability to lead, self-manage and critical thinking skills are key to success in this role. The candidate must be familiar with complex corporate organizational structures to understand how to learn what must be done for ad-hoc or new risk manager deliverables. Candidate must also be able to quickly adsorb new information, process and apply critical thinking to be able to identify the connect points requiring further follow-ups in the framework (e.g., updates to parallel but related deliverables).

Due to the complex nature of these different risk domains, candidate experience requirements are:

Must haves:

• Expert - critical thinking, thought leadership, and ability to conceptualize risk theory into tactical and practical solutions and approaches for enterprise stakeholders

• Expert - stakeholder management

  • communications skills (written, spoken) and ability to tailor & modify language and communication style to target audience

  • influencing and negotiating to achieve consensus, and ability to ensure completion of deliverables including deliverables required from other key stakeholders required for the target objective/outcome/state

  • Active listening to understand stakeholder feedback and core concerns to enable alignment to achieve consensus (ability to negotiate and solution through conceptual non-alignment)

• Expert - deep technical knowledge of one of the Risk Domains with the ability to quickly learn and become a generalist in the other associate risk domains (Data, AI, Analytics)

• Expert - 1st or 2nd line risk or audit experience or certifications (CIA, CISA, CRISC, CPA, etc.)

Would like haves:

• Regulatory experience

• Process managements, process engineering, process mapping, six sigma methodologies, quality management systems methodologies,

• Technology development (e.g., CMMI),

• AI development or implementation

Key Accountabilities:

The role is accountable for the following primary activities:

• Enterprise risk management strategies and policies: Designing and establishing Risk Strategy, roadmap, governance structure, engagement model and frameworks to proactively monitor and address adverse risks brought on by Data, AI or Analytics risks.

  • Development, management, and maintenance of the AI Risk policies and supporting documentation

  • Advisory support to the Data Risk policy team to ensure coordination of the Data Risk Directive and supporting materials updates

  • Strategy presentations for communication or consensus building

  • Discussion documentations for key stakeholder engagements

• Enterprise Risk Oversight: Provide informed risk oversight and challenge to ensure that risks associated with data, AI and or analytics are identified and managed in alignment with the organization's risk appetite. This includes identifying and interpreting enterprise risk exposures, issues, losses, trends and early warning signs and leading the reporting.

• Subject matter support and advisory: Be a trusted risk advisor to businesses across the bank in the application of data AI and analytics. Provide objective and independent risk expert advice and counsel to businesses, working with corporate partners on preventative measures to address potential adverse effects from data, AI and analytic. Act as a trusted advisor to senior leaders making business decisions and implementing strategic initiatives.

• Emerging trend monitoring and industry liaison: Proactively monitor trends and developments in emerging technologies, their applications in the financial service sector and relevant risk management practices. Identify emerging issues and interpret implications to BMO to inform decision making. Network with industry contacts to gather competitive insights and best practice. Act as the primary contact for internal/external stakeholder relationships, which may include regulatory bodies related to data, AI and analytic risks.

Knowledge & Skills:

• Typically 7+ years of relevant experience and post-secondary degree in related field of study or an equivalent combination of education and experience.

• Degree in Information Technology, Computer Science, Business Management, Audit or Risk Management, or related field of study preferred.

• Expert subject matter knowledge in one of the technical areas: data, AI and analytic domain, including, AI, robotic process automation, and other emerging technologies (Blockchain, Open Banking, Cloud computing, DLT, IoT, etc.). Technical knowledge of quantitative techniques, development lifecycles and tools utilized in analytics teams, with a good grasp of how to effectively manage these risks.

• 5+ years in management consulting. Prior experience in a consulting/advisory firm is an asset

• Superior ability to sense the market through solid research and analysis of trends and emerging technologies, synthesizing the insights from the analyses, developing recommendations based on the synthesis and creating plans to implement the recommendations. Experienced in framing and communicating complex problems and ideas into easy to understand concepts by preparing frameworks, building decks and providing supporting materials to internal and external stakeholders

• Experienced in designing, leading, facilitating, and participating in cross-functional workshops focused on bringing diverse teams together to inform and align on a shared set of goals/strategies

• Proven experience in identifying, assessing and monitoring non-financial risk, leveraging extensive insights and experience within the industry. Superior ability to effectively communicate risk and threat topics to executives and secure support. Current experience in managing data, AI and analytic risk an asset.

• Strong relationship building skills and expertise in collaborating with stakeholders across all levels of the organization. Provide visible leadership in the promotion of sound enterprise risk management practices across the organization, in the data, AI and analytic space.

• Excellent business acumen and analytical skills, including financial and business analysis, research, and complex methodological concepts with demonstrated aptitude for strategic and critical thinking. Ability to set a vision, manage roadblocks and execute through influence across all stages of a risk program lifecycle.

• Ability to manage multiple tasks simultaneously, maintain focus and prioritize in a dynamic, fast-paced and at times ambiguous and pressurized environment

• Experience working with cloud service and other data, AI and analytic providers (MS Azure, Google, LUIS, etc.) is an asset

• Experience with AI programming language (R, Python, etc.) and data visualization tools (Spotfire, Power BI, PowerAPPS, etc.)

Core Competencies:

• Passion for technology and innovations, Digital advocate, Collaboration & team skills; Analyze Issues and Solve Problems, Expert data driven decision making, Ability to manage ambiguity, Identify Improvements, Execute Efficiently, Show Initiative, Solicit Support, , Strategize and Develop, Communicate Effectively, Demonstrate Credibility, Readily Adapt.

• Fosters a culture aligned to BMO purpose, values and strategy and role models BMO values and behaviours in all that they do.

• Ensures alignment between values and behaviour that fosters diversity and inclusion.

• Regularly connects work to BMO's purpose, sets inspirational goals, defines clear expected outcomes, and ensures clear accountability for follow through.

• Builds interdependent teams that collaborate across functional and operating groups to create the highest value for all stakeholders

• Provides strategic input into business decisions as a trusted advisor.

• Makes recommendations to senior leaders on strategy and new initiatives based on an in-depth understanding of the business/group.

• Develops reports on the status of the governance program or framework components to various internal and external stakeholder audiences.

• Influences and negotiates to achieve business objectives.

• Identifies emerging issues and trends to inform decision-making.

• Researches existing or emerging requirements and related best practices to develop recommendations for changes/enhancements.

• Broader work or accountabilities may be assigned as needed.

• Qualifications:

• Typically 7+ years of relevant experience and post-secondary degree in related field of study or an equivalent combination of education and experience.

• Degree in Information Technology, Computer Science, Business Administration, or related field of study preferred.

• Completion of a Security related certification preferred (e.g. CISSP, CISA, CISM, GIAC).

• In-depth / expert knowledge of information and technology risk management practices.

• In-depth / expert knowledge of the designated business / product portfolio.

• In-depth / expert knowledge of regulatory requirements.

• In-depth / expert knowledge and experience with risk policy frameworks; quality control / testing frameworks.

• Seasoned professional with a combination of education, experience and industry knowledge.

• Verbal & written communication skills - In-depth / Expert.

• Analytical and problem solving skills - In-depth / Expert.

• Influence skills - In-depth / Expert.

• Collaboration & team skills; with a focus on cross-group collaboration - In-depth / Expert.

• Able to manage ambiguity.

• Data driven decision making - In-depth / Expert.

We're here to help

At BMO we are driven by a shared Purpose: Boldly Grow the Good in business and life. It calls on us to create lasting, positive change for our customers, our communities and our people. By working together, innovating and pushing boundaries, we transform lives and businesses, and power economic growth around the world.

As a member of the BMO team you are valued, respected and heard, and you have more ways to grow and make an impact. We strive to help you make an impact from day one - for yourself and our customers. We'll support you with the tools and resources you need to reach new milestones, as you help our customers reach theirs. From in-depth training and coaching, to manager support and network-building opportunities, we'll help you gain valuable experience, and broaden your skillset.

To find out more visit us at https://jobs.bmo.com/ca/en.

BMO is committed to an inclusive, equitable and accessible workplace. By learning from each other's differences, we gain strength through our people and our perspectives. Accommodations are available on request for candidates taking part in all aspects of the selection process. To request accommodation, please contact your recruiter.

Note to Recruiters: BMO does not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to BMO, directly or indirectly, will be considered BMO property. BMO will not pay a fee for any placement resulting from the receipt of an unsolicited resume. A recruiting agency must first have a valid, written and fully executed agency agreement contract for service to submit resumes.