Cyber Security Advisor

BMO U.S.

. Serve as a trusted cybersecurity advisor to business and technology teams .

Posted 10/23/2026full-timeRemote • United StatesMid-LevelSenior💰 $90,000 - $180,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity advisory, risk management, and compliance, with a strong focus on aligning security controls with organizational policies and industry standards. Proficient in stakeholder engagement, data analysis, and the implementation of security strategies to enhance information security posture.

Highest-signal resume keywords

Cybersecurity GuidanceRisk Management FrameworkNIST CSFInformation Security CertificationsCloud Security

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Documentation ValidationApplication Security ReviewData AnalysisSecurity Control ImplementationCompliance AuditingRisk AssessmentIncident ResponseDevSecOpsZero TrustSIEM

Soft Skills

CommunicationCollaborationProblem-SolvingInfluenceAnalytical Thinking

Tools & Technologies

EncryptionFirewallsIDS/IPSDLPLog Aggregation

Certifications & Qualifications

(ISC)2ISACASANS

Industry Keywords

ISO 27001PCI DSSCybersecurity Best PracticesGovernanceCompliance

Tech Stack

Tools & technologies

CloudCyber SecurityFirewalls

About the role

Key responsibilities & impact

Serve as a trusted cybersecurity advisor to business and technology teams
Guide stakeholders through security requirements for technology initiatives, application changes, infrastructure updates, data movement, and production deployments
Liaise among business stakeholders, application teams, infrastructure teams, and cybersecurity SMEs
Review application architectures and development patterns for security risks and recommend improvements
Identify risks across custom-built, SaaS, and third-party applications and define remediation plans with application owners
Recommend security controls aligned with BMO policies and standards
Review security product and technology implementation
Review authentication, authorization, data handling, and integration patterns for secure-by-design implementation
Validate security documentation, evidence, and control requirements
Coordinate security reviews, approvals, initiatives, action items, and implementation of improvements
Provide information security consulting, guidance, advice, and recommendations to business and group leaders
Develop and support information security strategies and strategic plans
Build relationships with internal and external stakeholders and influence outcomes
Translate business needs into information security solutions and recommendations
Act as day-to-day vendor contact and support vendor solution implementation, maintenance, and sustainment
Track metrics and milestones, escalate issues, and recommend resolutions
Facilitate stakeholder discussions and manage initiatives and issues using elicitation techniques
Promote process improvements, methodologies, cybersecurity best practices, and emerging technologies
Create and deliver concise professional presentations
Assess information security impacts when project scope changes
Gather and analyze data to provide insights, answer business questions, and make actionable recommendations
Support continuous improvement and root cause analysis
Make risk-informed decisions in line with BMO’s Risk Management Framework, policies, laws, and regulations

Requirements

What you’ll need

3–5 years of experience reviewing technology, application, infrastructure, or production changes against cybersecurity policies, standards, and controls
3–5 years of experience validating security documentation, evidence, and control requirements in security review, governance, audit, compliance, or approval processes
3–5 years of experience coordinating initiatives, tracking action items, monitoring progress, and supporting security improvements
3–5 years of experience providing cybersecurity guidance and recommendations to business and technology stakeholders
Typically 4–7 years of relevant experience
Post-secondary degree in Information Security, Computer Science, Engineering, Information Systems, or a related field, or equivalent combination of education and experience
Preference for at least one related-field certification; strong preference for recognized information security certifications such as (ISC)2, ISACA, or SANS
In-depth understanding of NIST CSF, ISO 27001/27002, PCI DSS, and related industry standards
Knowledge of cloud security, DevSecOps, Zero Trust, SIEM, encryption, firewalls, IDS/IPS, DLP, endpoint protection, and log aggregation
Experience with information security concepts, methodologies, processes, procedures, and controls
Knowledge of business analysis and project delivery practices across the project lifecycle
Understanding of information security risk and regulatory requirements
Strong verbal and written communication, collaboration, analytical, problem-solving, influence, and data-driven decision-making skills

Benefits

Comp & perks

Performance-based incentives
Discretionary bonuses
Health insurance
Tuition reimbursement
Accident insurance
Life insurance
Retirement savings plans
In-depth training and coaching
Manager support
Network-building opportunities
Reasonable accommodations for individuals with disabilities