Managing Director - Insider Threat Program

Responsibilities

• Lead the Bank’s enterprise insider threat program, defining strategy, governance, and operating model to proactively identify, assess, mitigate, and prevent insider-driven risk.
• Build a risk-based approach to insider threat, strengthening the Bank’s ability to anticipate emerging threats, close control gaps, and enhance operational resilience.
• Maintain a forward-looking view of emerging insider risks, including employee-enabled fraud, credential misuse, data exfiltration, collusion, third-party insider risk, and cyber-enabled activity.
• Define and lead the enterprise insider threat strategy and long-term roadmap, establishing governance structures, escalation protocols, and decision-making forums.
• Drive the maturation of capabilities from reactive investigations to proactive, intelligence-led prevention across cyber, fraud, financial crimes, corporate security, operations, legal, global investigations, risk, privacy, and human resources.
• Develop and optimize insider threat analytics, tools, and capabilities to support scalable, intelligence-driven risk detection and reporting.
• Own the end-to-end insider threat control framework, including prevention rules, risk-based detection models, behavioral analytics, investigative protocols, case management standards, and escalation processes.
• Identify systemic control gaps and drive remediation across identity and access management, privileged access, data protection, fraud controls, vendor access, and critical operations.
• Ensure adherence to the Bank’s Risk Appetite Framework and support regulatory exams, audits, and governance reviews.
• Promote and support the Bank’s risk culture, drive continuous improvement, and develop high-performance talent across risk and business functions.

Qualifications

• 10+ years in a global systemically important bank (GSIB), large financial institution, intelligence agency, law enforcement, military, or critical infrastructure environment.
• Experience in leading enterprise-side or global risk or security programs with a proven track record building or transforming insider threat, cyber, fraud, or security capabilities.
• Deep experience managing complex investigations involving employees, contractors, third parties, cyber incidents, fraud activity, or data misuse.
• Strong knowledge in at least one of the following areas: insider threat, cybersecurity, fraud, financial crime, investigations, operational risk, or enterprise security.
• Understanding of banking operations, conduct risk, and financial crime typologies, and regulatory expectations related to cyber, fraud, and operational resilience.
• Working knowledge of analytics, detection models, and insider threat tools.
• Ability to lead global distributed teams and build multidisciplinary capabilities.
• Strong leadership presence with the ability to influence senior stakeholders, high judgment, discretion, and ability to translate risk signals into actionable insights.
• Preferred professional certifications such as CISSP, CISM, CFE, CAMS, CPP, GIAC, CISA, or CRISC.
• Background in law enforcement, intelligence, or national security organizations and an established external network across industry, law enforcement, and intelligence communities.

BMO is proud to be an equal employment opportunity employer. We evaluate applicants without regard to race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or any other legally protected characteristics. We also consider applicants with criminal histories, consistent with applicable federal, state and local law. BMO is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please send an e-mail to View email address on click.appcast.io and let us know the nature of your request and your contact information.