B

Bank of Montreal

Runs Canadian and US banks for people and firms

Vice President - Business Control Assurance

Full-TimeDeadline 12/31/26
CA$90k - CA$130k+ Commission structure + Performance-based incentives + Discretionary bonuses
Senior
Bachelor's, Master's
Toronto, ON, Canada
In Person
Risk & ComplianceInternal Audit & Controls

About the job

Requirements
  • Strong control assurance judgment, including the ability to assess whether control design, evidence and operating performance support a defensible conclusion.
  • Ability to develop risk-based plans, manage concurrent testing portfolios and deliver to clear quality and timing standards.
  • Clear, concise written and verbal communication, including the ability to explain complex findings and business implications to senior stakeholders.
  • Effective stakeholder management and constructive challenge across front-office businesses, Operations, Technology, specialist first-line teams, second-line risk and Internal Audit.
  • Strong analytical capability, attention to detail and ability to identify patterns across controls, processes, issues and testing outcomes.
  • Demonstrated ability to lead, coach and quality-review employees and contractors in a high-expectation environment.
  • Independent, objective and willing to challenge constructively.
  • Practical problem solver who distinguishes material risk from process noise.
  • Self-directed, accountable and disciplined in execution.
  • Calm under pressure and able to manage competing priorities and sensitive findings.
  • Collaborative and credible, with sound judgment and high professional standards.
  • Undergraduate degree in Business Administration, Risk Management, Economics, Finance, Accounting or a related discipline.
  • Seven or more years of experience in financial services, Capital Markets, business controls, non-financial risk, internal audit, compliance testing, technology risk or related assurance disciplines.
  • Demonstrated experience leading the control testing lifecycle, including risk-based planning, test design, Design Effectiveness and Operating Effectiveness assessment, sampling, documentation, quality review, reporting and remediation follow-up.
  • Strong understanding of internal control frameworks and the respective accountabilities of first-line business and control teams, first-line Enterprise Control Functions, second-line oversight and Internal Audit.
  • Experience presenting testing outcomes, thematic insights and recommendations to senior management and supporting regulatory or audit engagements.
Responsibilities
  • Translate the MD-approved Capital Markets assurance strategy and annual plan into executable testing portfolios, using risk, control inventory, prior testing, issues, events, audit results, business change and regulatory priorities to focus coverage on material exposures.
  • Define scope, sequencing, frequency and testing approach across businesses, processes, legal entities and risk categories; identify overlaps and gaps across first-, second- and third-line assurance activity.
  • Develop proportionate test strategies, scripts, sampling approaches and evidence requirements that address the control objective and underlying risk.
  • Engage Business Control teams and subject matter experts during planning and test design without compromising independent execution or conclusions.
  • Document and operationalize clear roles across Business Control teams, Governance and Controls, control owners, first-line Enterprise Control Functions and other assurance providers for assigned portfolios; identify overlaps, gaps or conflicting expectations and escalate matters requiring enterprise or senior management resolution to the MD.
  • Deploy assigned employees and contractors based on risk, product knowledge, technical capability and capacity; manage day-to-day delivery and escalate structural capacity or capability gaps to the MD.
  • Perform or oversee Design Effectiveness and Operating Effectiveness testing; document scope, populations, samples, evidence, exceptions, ratings and rationale in accordance with enterprise and Capital Markets requirements.
  • Review work for completeness, consistency and supportability; challenge weak evidence, unsupported conclusions and methodology deviations before submission.
  • Communicate deficiencies promptly, support root-cause and issue assessment, agree practical actions with accountable owners, and track remediation and re-testing to closure without assuming business ownership.
  • Ensure testing plans, results, approvals, evidence and required records are complete, accurate, timely and audit-ready in GRCE.
  • Coordinate with second-line risk stakeholders, respond to challenge, resolve factual or methodological questions and escalate unresolved matters through the appropriate governance path.
  • Report plan delivery, test outcomes, overdue activity, recurring deficiencies, risk concentrations and remediation status to the MD, Control Assurance and relevant governance forums.
  • Analyze results across businesses and risk categories to identify systemic control weaknesses, inconsistent practices and opportunities for preventative controls, automation or control simplification.
  • Maintain procedures, templates and quality standards; integrate lessons learned; support training and capability development; and improve data, workflow and reporting efficiency.
  • Present complex findings clearly and credibly to business leaders, control owners, risk partners, auditors and regulators where required.
Desired Qualifications
  • Knowledge of Capital Markets products, front-to-back processes and associated operational, regulatory, technology, data, third-party and resilience risks.
  • Experience with governance, risk and compliance platforms and data-driven reporting; GRCE, Excel and Power BI experience.
  • Graduate degree or relevant professional designation; professional designations such as CPA, CIA, CISA, CRMA or equivalent are an asset.
  • Prior audit experience.

About the company

Bank of Montreal, known as BMO, runs a Canadian bank and a large American bank, serving households and businesses on both sides of the border. Until the Bank of Canada opened in 1935, it acted as the Canadian government's banker. People use its branches and apps for accounts, mortgages, credit cards, and investments, while companies borrow from it and turn to its BMO Capital Markets arm to raise money and trade securities. BMO makes money on the gap between the interest it charges on loans and pays on deposits, plus fees from managing wealth and advising on deals. Bank of Montreal was founded in 1817 as Canada's first bank, and it keeps its legal head office in Montreal and its executive offices in Toronto, Canada.

Company Size

10,001+

Company Stage

IPO

Headquarters

Toronto, Canada

Founded

1817

Get referred to Bank of Montreal

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Profits are climbing: before one-time items, BMO earned C$2.86 billion in the quarter ending July 2026, up 19%.
  • Expansion means jobs out West: in March 2026, BMO announced plans for 130-plus new California branches within five years.
  • Payouts are steady: BMO has paid a dividend every year since 1829, the longest record of any Canadian company.

What critics are saying

  • Cost cuts reach staff: BMO reported a C$202 million severance charge in February 2026 as headcount fell 678 to 53,035.
  • The U.S. arm earns less: its 8.6% return on equity trailed BMO's overall 13% in the quarter ending April 2026.
  • Compliance lapses draw fines: Canada's consumer watchdog fined BMO C$4 million in February 2026 for overcharging 101,091 customers.

What makes Bank of Montreal unique

  • Business lending comes first: 56% of BMO's loans in April 2026 went to companies and governments, 28% to mortgages.
  • It is a big American bank too: its U.S. arm ranked 16th in the country by assets in June 2026.
  • Chicago is its second hub: 81 of BMO's 926 job openings in October 2026 were there, behind only Toronto's 241.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Health Insurance
  • Tuition Reimbursement
  • Accident and Life Insurance
  • 401(k) Retirement Plan
  • Professional Development Budget
  • Hybrid Work Options

Company News

Yahoo Finance
Oct 21st, 2026
BMO names Tim Cox US chief as Darrel Hackett retires, with $1.5T in assets

BMO has named Tim Cox as its next US chief executive, succeeding Darrel Hackett, who retires from the role on November 1. Cox is currently the bank's US general counsel and chief regulatory officer. Hackett, one of the most prominent Black US banking leaders, will become executive vice chair and senior adviser. Cox will join the bank's executive committee, chair the US management committee, and report to chief executive officer Darryl White. The change follows BMO's plan to open 130 branches in California and 15 in Arizona by 2031. The bank, which counts itself as the eighth-largest in North America with $1.5 trillion in assets, expanded on the West Coast by buying Bank of the West in 2023. Cox joined BMO in 2010 and became US general counsel in 2022.

ABF Journal
Oct 21st, 2026
FGI Finance Supports LTP Sports Group with $65MM ABL Facility

LTP Sports Group, a wholesale distributor of bikes, parts and accessories, sought a finance partner that shares its commitment to genuine partnerships and

Stockhouse
Oct 20th, 2026
Evolve Royalties secures $75M BMO credit facility to grow copper royalty portfolio

Evolve Royalties has arranged a revolving credit facility of up to $75 million with BMO. The company, which focuses only on copper royalties, plans to use the money to add royalty and streaming deals. Evolve provides capital to mining companies in exchange for a share of future revenues. This gives it exposure to copper production without mine operating and construction costs. Chief executive officer Joseph de la Plante expects supply to fall short of demand as electric vehicles, data centres and electrification lift consumption, while ageing mines and few new discoveries limit output. His team previously founded Nomad Royalties, which Sandstorm acquired in 2022. Evolve went public in December.

Compliance Week
Oct 15th, 2026
CFPB targets debanking practices after OCC report.

CFPB targets debanking practices after OCC report. President Donald Trump issued an executive order in August 2025 to deter debanking, but a recent report from the Office of the Comptroller of the Currency (OCC) found that the nine largest national banks maintained debanking policies. Now the US Consumer Financial Protection Bureau (CFPB) is taking action against those institutions in one of the few actions it has taken since the start of the current Trump administration. The CFPB announced a new initiative Wednesday to investigate debanking activities. The bureau says it will determine whether the nine banks named in the OCC report - JPMorgan Chase Bank, Bank of America, Citibank, Wells Fargo Bank, U.S. Bank, Capital One, PNC Bank, TD Bank, and BMO Bank - and other institutions violated federal consumer financial laws, and it will take enforcement action if the investigation establishes grounds to do so.

Startup Finance Guide
Oct 15th, 2026
CFPB targets debanking of startups and fintech: what founders need to know about bank account risk.

CFPB targets debanking of startups and fintech: what founders need to know about bank account risk. Photo · Startup Finance Guide The CFPB launched a debanking investigation on October 14, 2026, targeting nine major US banks. Cross-border startup founders should audit banking relationships and document any account restrictions immediately. This article is for informational purposes only and does not constitute financial, tax, or legal advice. Consult a qualified professional for guidance specific to your situation. Editorial note: Reviewed for accuracy by the Startup Finance Guide editorial team. Its editors cross-reference all claims against platform documentation, regulatory publications, and vendor disclosures. Last reviewed: 2026-10-15. The Consumer Financial Protection Bureau (CFPB) announced on October 14, 2026, that it will investigate nine of the largest US banks, including JPMorgan Chase, Bank of America, Citibank, Wells Fargo, US Bank, Capital One, PNC Bank, TD Bank, and BMO Bank, for debanking practices that may have denied or restricted financial access based on customers' political beliefs, religious views, or lawful business activities. The announcement follows a report by the Office of the Comptroller of the Currency (OCC), titled "Guaranteeing Fair Banking for All Americans," which examined the nine largest national banks under OCC supervision and found documented evidence, including internal emails, that these institutions maintained policies restricting access for customers in sectors such as firearms, oil and gas, and tobacco. The CFPB holds primary supervisory and enforcement authority over banks with more than $10 billion in assets, which covers all nine institutions named in the OCC report. The initiative implements Executive Order 14331, "Guaranteeing Fair Access to Banking for All Americans," signed in August 2025. For cross-border startup founders and fintech operators, the practical stakes are immediate. Payment processing accounts, treasury accounts, and banking rails are the operational backbone of any early-stage company. Losing access, even temporarily, can freeze payroll, block customer collections, and disrupt foreign exchange flows governed by frameworks like the Foreign Exchange Management Act (FEMA) in India or the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) in Canada. What this means for founders. Founders operating in sectors that have historically drawn heightened bank scrutiny, including crypto, cannabis-adjacent fintech, firearms-related commerce, and certain cross-border payment corridors, face the most direct exposure. But the OCC report's findings suggest that debanking decisions have not been limited to those categories. Any startup whose business model, investor base, or customer profile sits outside a bank's informal risk appetite could be at risk. Here are the steps worth taking now. First, pull your account agreements and review any "right to terminate" or "reputational risk" clauses. Banks have historically used broad contractual language to close accounts with minimal notice. The CFPB's review of its own Examination Manual specifically targeted the removal of "reputation risk" concepts that could enable unlawful debanking, but that internal review does not automatically change your existing contract terms. Second, if your startup has received a notice of account closure or restriction in the past 24 months, document the timeline and any written communications. The Equal Credit Opportunity Act (ECOA) and Fair Credit Reporting Act (FCRA) both carry adverse action notice requirements: banks must tell you why access was denied or restricted. If you did not receive a compliant adverse action notice, that is a potential ECOA or FCRA violation worth flagging to a qualified attorney. Third, file a complaint with the CFPB if you believe your account was closed or restricted without a lawful basis. The CFPB updated its complaint portal in connection with this initiative and is actively collecting data to support its investigations. Fourth, diversify your banking infrastructure before you need to. Relying on a single large bank for both operating accounts and payment processing creates a single point of failure. Fintech platforms such as Mercury, Brex, and Relay Financial offer business banking alternatives with different risk profiles than the nine banks named in the OCC report. For cross-border treasury, platforms like Wise Business and Airwallex operate under different regulatory frameworks and may carry lower debanking risk for certain business types. None of these alternatives are immune to account restrictions, and founders should read each platform's terms of service carefully. What changed. Debanking is not a new phenomenon, but the regulatory framing around it has shifted materially in 2025 and 2026. The CFPB under Acting Director Mark Paoletta has reoriented the agency's debanking focus toward politically and religiously motivated account closures, citing Executive Order 14331. The OCC report, released before the CFPB's October 14 announcement, provided the evidentiary foundation: excerpts from bank documents showing that internal policies at the nine named institutions restricted access for customers based on factors that regulators now characterize as unlawful. The CFPB's prior administration, under Director Rohit Chopra, had also flagged debanking as a concern, though with a different emphasis on algorithmic and automated account closure practices affecting consumers. The current initiative is narrower in its stated political framing but broader in its enforcement scope, since the CFPB is now explicitly reviewing supervisory and enforcement data across all institutions under its authority, not just the nine named in the OCC report. For fintech operators, the relevant legal hooks are ECOA, FCRA adverse action requirements, and the Unfair, Deceptive, or Abusive Acts or Practices (UDAAP) standard. UDAAP is a broad standard that gives the CFPB significant discretion to define what counts as an abusive practice. The agency has not yet issued formal guidance specifying exactly which debanking fact patterns it will treat as UDAAP violations, which means the enforcement perimeter is still being drawn. Limitations and open questions. The CFPB has announced an investigation, not a final rule or enforcement action. No bank has been formally charged, and no penalties have been assessed as of October 15, 2026. The timeline for any enforcement outcomes is unknown. The OCC report focuses on the nine largest national banks. State-chartered banks, credit unions, and non-bank fintech platforms are not covered by the OCC's findings, though the CFPB's own authority extends to certain nonbank financial institutions as well. Whether the CFPB will expand its review beyond the nine named institutions is not yet clear. The political framing of the initiative, which centers on debanking of customers based on support for specific political figures or causes, may affect how courts interpret any eventual enforcement actions. Legal challenges to CFPB authority have been frequent in recent years, and the scope of UDAAP as applied to account termination decisions has not been fully litigated. Finally, for founders incorporated outside the US or operating under dual regulatory regimes, the CFPB's jurisdiction does not extend to foreign banks or to the foreign operations of US banks. If your primary banking relationship is with an Indian bank regulated by the Reserve Bank of India (RBI) or a Canadian institution regulated under the Bank Act, the CFPB's investigation does not directly apply, though analogous debanking concerns exist in those jurisdictions under separate frameworks. The CFPB has not published a formal timeline for completing its review or issuing any guidance. Founders should monitor the CFPB newsroom and the OCC's publications directly for updates. This article is for informational purposes only and does not constitute financial, tax, or legal advice. Consult a qualified professional for guidance specific to your situation. Sources. All news Updated 15 October 2026