Managing Director - Insider Threat Program (Chicago)

Enterprise Insider Threat Program Leadership

Leads the Bank's enterprise insider threat program, defining strategy, governance, and operating model to proactively identify, assess, mitigate, and prevent insider-driven risk. Establishes a risk-based approach to insider threat, strengthening the Bank's ability to anticipate emerging threats, close control gaps, and enhance operational resilience. Maintains a forward-looking view of emerging insider risks, including employee-enabled fraud, credential misuse, data exfiltration, collusion, third-party insider risk, and cyber-enabled activity.

Strategy & Operating Model

• Defines and leads the enterprise insider threat strategy and long-term roadmap.
• Builds a consistent global framework aligned to regulatory, legal, privacy and labor requirements; regulatory first design.
• Establishes governance structures, escalation protocols, and decision‑making forums.
• Matures capabilities from reactive investigations to proactive, intelligence‑led prevention.

Cross‑Functional Leadership & Integration

• Partners across Cybersecurity, Fraud, Financial Crimes, Corporate Security, Operations; Legal, Global Investigations, Risk, Privacy, Human Resources.
• Integrates insider threat capabilities across systems, platforms, and control environments.
• Establishes clear routines for collaboration, escalation, and coordinated response.
• Promotes a culture of proactive risk identification and responsible escalation.

Data, Analytics & Intelligence

• Develops and optimizes insider threat analytics (e.g., user and entity behavior analytics), tools, and capabilities to support scalable, intelligence‑driven risk detection.
• Builds a consolidated insider threat intelligence capability integrating cyber, fraud, financial crime, HR, and investigative signals (data fusion).
• Delivers executive‑level reporting and insights on insider threat posture, emerging risks, significant cases, control effectiveness, and remediation progress.
• Leverages data, analytics, and risk indicators to inform strategy, prioritization, and investment decisions.

Detection, Investigation & Response

• Owns the end‑to‑end insider threat control framework, including prevention rules, risk‑based detection models, behavioral analytics, investigative protocols, case management standards, and escalation processes.
• Embeds privacy‑by‑design and ethical monitoring practices, ensuring transparency, proportionality, and protection of employee dignity.
• Develops and enhances intelligence‑led detection capabilities and response frameworks to enable proactive risk identification and mitigation.
• Partners with Global Investigations to ensure consistent triage, investigation, escalation, and resolution of insider threat across the enterprise.
• Defines standards for response actions ensuring timeliness, proportionality, governance, and defensibility.
• Participates in complex, high‑risk investigations involving employees, contractors, third parties, cyber events, fraud activity, and control breaches, as required partnering with the Global Investigations team.

Governance, Risk & Regulatory Oversight

• Identifies systemic control gaps and drives remediation across identity and access management, privileged access, data protection, fraud controls, vendor access, and critical operations.
• Oversees adherence to the Bank's Risk Appetite Framework, ensuring insider threat risks are managed within defined tolerances.
• Defines and manages key risk indicators and key performance indicators for insider threat risk appetite.
• Supports regulatory exams, audits, and governance reviews, ensuring readiness and effective response across cyber risk, fraud, conduct risk, and operational resilience.

Leadership & Culture

• Promotes and supports the Bank's risk culture, ensuring employees understand accountability for risk‑taking activities and fostering an environment of open communication and effective challenge.
• Complies with the Bank's Risk Appetite framework and ensures risk‑taking activities remain within agreed limits.
• Models driving simplicity and productivity enhancements for optimization across groups, driving continuous improvement on key measures.
• Activates a winning culture, aligned with Purpose, igniting engagement by aligning culture to strategy and fueling exceptional execution.
• Fosters an inclusive environment for all employees by eliminating barriers to inclusion.
• Develops leaders, plans for succession, and fosters a high‑performance culture.
• Drives top talent acquisition and retention, developing organizational capabilities to drive competitive advantage.
• Leads and mentors a team with diverse risk and business experience, skills, and orientation.
• Leads, promotes, and reinforces the Bank's Ambition; role model One Bank leadership; drives sustainable improvements in customer loyalty and business growth; adheres and supports enterprise customer experience and brand standards.

Qualifications

• 10+ years in a global systemically important bank, large financial institution, intelligence agency, law enforcement, military, or critical infrastructure environment.
• Experience in leading enterprise‑side or global risk or security programs.
• Proven track record building or transforming insider threat, cyber, fraud, or security capabilities.
• Deep experience managing complex investigations involving employees, contractors, third parties, cyber incidents, fraud activity, or data misuse.
• Strong knowledge in one or more areas: insider threat, cybersecurity, fraud, financial crime, investigations, operational risk, or enterprise security.
• Understanding of banking operations, conduct risk, and financial crime typologies.
• Knowledge of regulatory expectations related to cyber, fraud, and operational resilience.
• Working knowledge of analytics, detection models, and insider threat tools.
• Ability to lead global distributed teams and build multidisciplinary capabilities.
• Strong leadership presence with the ability to influence senior stakeholders.
• High judgment and discretion in handling sensitive matters.
• Ability to translate complete risk signals into clear, actionable insights.
• Preferred professional certifications such as CISSP, CISM, CFE, CAMS, CPP, GIAC, CISA, CRISC, or relevant investigations/intelligence credentials.
• Background in law enforcement, intelligence, or national security organizations; established external network across industry, law enforcement, and intelligence communities.

Salary & Compensation

Position is targeted at a base range between $225,000 USD and $300,000 USD. Pay type: salaried. Total compensation may include performance‑based incentives, discretionary bonuses, and other perks. BMO also offers health insurance, tuition reimbursement, accident and life insurance, and retirement savings plans.

Equal Employment Opportunity

BMO is proud to be an equal employment opportunity employer. We evaluate applicants without regard to race, religion, color, national origin, sex, sexual orientation, gender identity, gender expression, transgender status, age, status as a protected veteran, or any other legally protected characteristics. We also consider applicants with criminal histories, consistent with applicable federal, state, and local law.

BMO is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please send an e‑mail to View email address on apply.placed-app.com and let us know the nature of your request and your contact information.