Security Engineer protecting Mysten Labs’ decentralized blockchain infrastructure and Sui ecosystem. Owning bug bounties, audits, supply - chain security, and anti - abuse tooling.
About the role
- Cybersecurity Advisor guiding BMO banking teams through security governance, controls, and technology change. Coordinating reviews, approvals, risk remediation, and stakeholder engagement.
Responsibilities
- Serve as a trusted cybersecurity partner to business and technology teams throughout technology initiative, application change, infrastructure update, data movement, and production deployment lifecycles
- Liaise among business stakeholders, application teams, infrastructure teams, and cybersecurity subject matter experts
- Review application architectures, development patterns, authentication, authorization, data handling, and integration patterns
- Identify cybersecurity risks across custom-built, SaaS, and third-party applications and define practical remediation plans
- Recommend security controls aligned with BMO policies and standards
- Review security products and technologies to ensure they protect systems and information and support organizational objectives
- Validate security documentation, evidence, and control requirements
- Coordinate security reviews, approvals, initiatives, action items, and implementation of security improvements
- Provide information security consulting, guidance, advice, and recommendations to business and group leaders
- Develop and support information security strategies and strategic plans
- Build relationships with internal and external stakeholders and influence outcomes
- Act as day-to-day vendor contact and support vendor solution implementation, maintenance, and sustainment
- Track metrics and milestones, recommend resolutions, and escalate issues as appropriate
- Facilitate stakeholder discussions and manage initiatives and issues using elicitation techniques
- Promote process improvements, methodologies, emerging technologies, and information security best practices
- Create and deliver concise professional presentations
- Assess information security impacts of project scope changes
- Gather, analyze, and interpret data to provide insights and actionable recommendations
- Support continuous improvement and root cause analysis
- Apply BMO’s Risk Management Framework and make risk-informed decisions aligned with policies, laws, regulations, and risk appetite
Requirements
- 3-5 years of experience reviewing technology, application, infrastructure, or production changes against established cybersecurity policies, standards, and control requirements
- Knowledge of cloud security, DevSecOps, Zero Trust, SIEM, encryption, firewalls, intrusion detection and prevention systems, data loss prevention, endpoint protection, and log aggregation
- 3-5 years of experience validating security documentation, evidence, and control requirements in security review, governance, audit, compliance, or approval processes
- 3-5 years of experience coordinating initiatives, tracking action items, monitoring progress, and supporting security improvements
- 3-5 years of experience providing cybersecurity guidance and recommendations to business and technology stakeholders
- Working knowledge of NIST Cybersecurity Framework and ISO 27001/27002
- Ability to analyze security requirements and translate them into practical guidance
- Strong communication, relationship-building, organizational, and problem-solving skills
- Typically 4-7 years of relevant experience
- Post-secondary degree in Information Security, Computer Science, Engineering, Information Systems, or related field, or equivalent combination of education and experience
- Preference for at least one related certification, with strong preference for recognized information security certifications from ISC2, ISACA, or SANS
- In-depth understanding of NIST CSF, ISO 27001/27002, PCI DSS, and related industry standards
- In-depth information security concepts and methodology
- In-depth knowledge of business analysis and project delivery practices across the project lifecycle
- In-depth knowledge of information security processes, procedures, and controls
- Working understanding of information security issues, risk, and regulatory requirements
- In-depth verbal and written communication, collaboration, analytical and problem-solving, influence, and data-driven decision-making skills
- Deep knowledge and technical proficiency gained through extensive education and business experience
Benefits
- Performance-based incentives
- Discretionary bonuses
- Health insurance
- Tuition reimbursement
- Accident and life insurance
- Retirement savings plans
- In-depth training and coaching
- Manager support
- Network-building opportunities
- Tools and resources to reach new milestones
- Accommodations available on request for candidates taking part in all aspects of the selection process
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Security Engineer designing controls for Kinaxis’s AI - powered supply - chain orchestration platform and corporate IT environments. Leading cloud security, vulnerability remediation, detection, and incident response.
Adjunct faculty teaching asynchronous cloud cybersecurity courses at University of Maryland Global Campus. Mentoring adult learners through pre - built curriculum and real - world security expertise.
Senior incident responder leading cybersecurity investigations and digital forensics for TELUS’s national cyber resilience team. Automating response playbooks and mentoring junior responders.
Security Assurance Specialist supporting customer questionnaires, Trust Center content, and security documentation. Coordinating assurance work across Case IQ’s security, legal, compliance, product, and sales teams.
Penetration Testing Analyst testing Sun Life financial - services applications, APIs, mobile systems, and infrastructure. Supporting vulnerability remediation and foundational Red Team exercises.
Penetration Testing Analyst performing web, API, mobile, and infrastructure security testing at Sun Life. Supporting vulnerability remediation, reconnaissance, and foundational Red Team exercises.
Senior information security advisor securing a large organization’s networks, systems, Azure, and Microsoft 365 environments. Assessing cyber risks, controls, threats, and compliance frameworks.
Senior Cybersecurity Engineer securing Blackline Safety’s worker - safety technology environment. Leading cloud, identity, infrastructure, incident response, and security automation initiatives.
Physical security specialist supporting Sun Life’s financial - services mission through threat intelligence, investigations, and incident analysis. Hybrid role engaging leaders, security partners, and emergency services.