Sankara Maruvada

Background

About Sankara Maruvada

I’m a cybersecurity and risk management leader with over two decades of experience helping financial institutions strengthen their security capability, governance, and oversight. My focus is on building programs that align cyber, cloud, and enterprise risk strategies with business goals—empowering organizations to make informed, risk-based decisions while maintaining trust and regulatory confidence. As Director of Cyber & Cloud Security Risk at the Bank of Montreal, I lead enterprise-wide oversight and provide independent challenge across the first line of defence. I work closely with senior executives to refine frameworks, align control practices with regulatory expectations, and embed risk transparency into governance and reporting. My perspective extends beyond cybersecurity alone. I’ve collaborated extensively across privacy, fraud, and operational risk, bringing an integrated view that strengthens enterprise-wide risk management. These cross-functional partnerships have shaped me into a trusted advisor—valued for connecting complex issues across disciplines and helping leaders make pragmatic, risk-informed decisions that balance innovation with control maturity. Throughout my 23-year journey, I’ve built and led programs spanning cyber governance, data protection, cloud security, third-party oversight, IT audits, and regulatory readiness. I’ve worked with global standards and regulators such as OSFI, SEC, ISO, NIST, PCI, GDPR, PIPEDA, PHIPA, and CCPA, helping organizations enhance compliance, strengthen accountability, and advance their risk maturity. My leadership style is collaborative and forward-looking, focused on mentorship, empowerment, and continuous improvement. I believe that cybersecurity capability isn’t just about protection—it’s about enabling trust, transparency, and secure digital growth. My passion lies in shaping resilient, high-performing teams and building integrated security capabilities that allow organizations to thrive securely in an evolving risk landscape.