BMO is currently sourcing for a Vulnerability Management Coordinator. This is a hybrid contract role in Toronto (2 days in office per week). Role Overview This role supports day-to-day vulnerability management and compliance activities across application and infrastructure environments within NA Commercial Banking T&O. The Vulnerability Management Coordinator works closely with technology teams to track, coordinate, and drive timely remediation of security vulnerabilities, ensuring operational security and compliance. The position contributes to maintaining the organization's security posture and supports audit and control testing activities.
Key Responsibilities
Coordinate intake, analysis, triage, and tracking of identified vulnerabilities. Support remediation activities by collaborating with application and infrastructure teams. Maintain accurate vulnerability and issue records in tracking tools. Monitor remediation progress, identify risks or delays, and escalate as needed. Support vulnerability metrics, reporting, and dashboard development. Provide operational support for audit or control testing activities as required. Manage change management tasks focused on execution and sustainment activities. Track exception requests and corresponding approvals. Prepare concise, executive-level, fact-based reporting. Exercise judgment to identify, diagnose, and solve problems within established rules. Work independently on complex tasks, including unique situations. Support and drive various compliance-related initiatives as needed.
Must-Have Skills
4–6 years of experience in vulnerability management, IT security operations, or technology risk/compliance. Solid understanding of vulnerability management processes and security concepts. Strong analytical, organizational, and communication skills (verbal and written) to work effectively with stakeholders. Experience working in fast-paced, multi-stakeholder environments. Understanding of query creation and maintenance.
Nice to Have Skills
Experience with ServiceNow (strong plus). Familiarity with vulnerability scanning tools and reporting platforms such as Power BI. Exposure to audit or control testing support activities. Knowledge of Co-Pilot. Familiarity with COBIT framework (not mandatory). Ability to understand and build queries.
Ideal Candidate
Contractor role focused on execution with ability to learn and fit well within a collaborative team. No people management responsibilities required. Open to candidates with Business Analyst experience, although not a requirement. Does not require deep technical expertise but must have strong communication skills.
