Senior Manager, Third Party Risk ,Cybersecurity

Application Deadline:

Address:

Job Family Group:

As a Senior Manager of Third-Party Risk Assessment at BMO, you won’t just manage assessments — you’ll shape how we secure hundreds of critical third-party relationships that power one of North America’s leading financial institutions. This is more than a people management role — it’s a chance to build, coach, and elevate a team of experts while leading frontline efforts in cyber defense.

What Makes This Role Stand Out:

• 100% Remote Flexibility: Work remotely while leading a leading team of experienced Third Party Cyber Assessors — most of whom are tenured, and highly skilled in Third Party Risk Assessments
• Strong Peer Collaboration: You’ll partner closely with another senior manager and report directly to a Director who leads a dynamic 20-person assessment team. You’ll never lead in isolation — you’ll be part of a collaborative leadership structure.
• High Impact & Visibility: Lead quality assurance across hundreds of assessments annually, coach Third Party Risk Assessors, engage with executive stakeholders, and help drive resolution of complex risk findings. You’ll be seen as a go-to expert and decision-maker.
• Mission-Driven Culture: Our team thrives in a fast-moving, high-stakes environment where we balance business agility with security, regulatory expectations, and internal audit. This is cyber with real-world impact — where negotiation, leadership, and strategy matter just as much as technical acumen.
• Growth & Thought Leadership: You’ll be expected to challenge the status quo, bring fresh ideas to evolve our assessment model, and stay ahead of emerging threats — while mentoring others to do the same.

What You Bring to the Table:

• 5-10+ years of Cyber Third-Party Risk assessment experience,

• 5+ years in people-leadership (Managerial) role(s)

• CISSP certified

• Deep knowledge of NIST, ISO, or CIS frameworks

• Hands-on experience with major Cloud platforms such as AWS, Azure, or Google Cloud with a strong understanding of cloud security principles, architectures, and best practices.
• Expert-level capability in interviewing, auditing, documentation, and risk reporting
• Strong coaching instincts and the ability to raise the bar on technical quality
• A calm, assertive presence with proven skills in conflict resolution, negotiation, and influence
• Bonus points for ethical hacking certifications (OSCP, GPEN, CEPT)

You’ll Excel Here If You…

• Love being the calm in the chaos — stepping into crisis calls, leading tough conversations, and helping teams find clarity
• Get energy from teaching others and raising the standard of the whole team
• Aren’t …