Cyber Data Management Lead

BMO is currently sourcing for a Data Governance Specialist (Cyber), to support cyber data governance within the Financial Crimes Unit.This is a hybrid contract role in Toronto (2 to 3 days in office per week). Role Overview This role supports the governance of cybersecurity data, much of which is held in Splunk with a growing cloud component. The Data Governance Specialist works with the cyber teams to understand their data and use cases, catalog what is held and determine what is relevant to retain. The focus is on governance and data management, including reducing Splunk utilization and cost by cleaning up stale or unnecessary data. The role bridges the data team and cyber stakeholders and does not involve engineering in Splunk or SailPoint.

Key Responsibilities

Catalog and document cyber data and identify which data is most impactful Review data held in Splunk and recommend retention and cleanup to manage utilization and cost Meet with cyber teams to understand their data and the use cases it supports Build data governance frameworks for cyber data across the line of business Query data from multiple cyber sources, including IAM, GSOC and threat intelligence feeds Connect data sources such as SailPoint identity data to cyber use cases that need them

Must-Have Skills

7+ years of experience in data governance or data management at a senior level Data governance and data management, including cataloging, retention and data lifecycle Experience with Splunk or a comparable SIEM tool, with the ability to query it Working knowledge of cyber data domains such as IAM, GSOC alerts and threat intelligence Hands-on SQL and querying of large datasets Conceptual understanding of how identity tools such as SailPoint feed cyber data

Nice to Have Skills

Direct SailPoint knowledge Splunk cloud experience Prior BMO experience Experience at a financial institution, ideally a Canadian big five bank Exposure to data quality tools and BI tools AWS or cloud data experience

Ideal Candidate

Has governed data for a cybersecurity team and understands how cyber teams use their data Has worked with large volumes of log or alert data and managed retention or cost Has experience in a regulated financial services environment Is comfortable starting data conversations with cyber SMEs without needing to be a cyber engineer