Calvin Wong

Calvin Wong

Entry-Level Cybersecurity Analyst · Identity & Access Management · Financial Services Operations

Toronto, Canada · 647 989 8972 · iam@calvinwong.ca · linkedin.com/in/calvinkmwong

Download PDF

Professional Summary

Detail-oriented and discreet financial-services operations professional transitioning into cybersecurity, with hands-on experience safeguarding confidential client data, enforcing policy and compliance standards, and supporting audit and risk review within a leading Canadian wealth-management organization. Certified in security fundamentals (CompTIA Security+, SecAI+) and identity and access management (Microsoft Identity and Access Administrator Associate), complemented by hands-on Python, SQL, and Azure experience. Recognized for sustained focus, reliability, and sound judgment when handling sensitive information, and well suited to entry-level security operations, IAM, or risk-and-compliance analyst roles within Canadian financial institutions.

Professional Experience

Private Banking Operations Associate · BMO Private Wealth Management

Toronto, ON · Jun 2025 – Present

  • Safeguard confidential client information while processing account openings, maintenance, and service requests for high-net-worth clients, applying strict access-control and confidentiality standards.
  • Recognized by branch leadership for efficiently opening six Ultra-High-Net-Worth (UHNW) client accounts within a compressed timeframe, prompting a nomination for the firm's Grand Ovation recognition award and commendation directly to management.
  • Identified a manual, error-prone bottleneck in document processing and proposed an AI-assisted document-review agent to leadership, which was accepted for implementation to reduce account-processing time and ease the manual workload contributing to staff fatigue (prototyped independently as the Account Onboarding Agent project).
  • Review sensitive client documentation and financial records to verify eligibility, detect discrepancies, and support resolution in accordance with banking policy and regulatory requirements; these skills transfer directly to security incident triage and compliance review.
  • Maintain audit-ready, organized client records that support internal risk and audit reviews, reflecting strong attention to data integrity and traceability.
  • Collaborate discreetly and reliably with relationship managers and wealth advisors, consistently handling privileged information with professionalism.

Senior Process Analyst, Managed Product Services · BMO Wealth Management

Toronto, ON · Sep 2022 – May 2025

  • Reviewed managed-program accounts for policy deficiencies, applying a meticulous, security-conscious approach to identify exceptions before they became risk issues.
  • Performed reconciliations and service requests across RIS and Wealth 360 systems, independently investigating documentation gaps and resolving data exceptions.
  • Conducted quality-assurance reviews and trained new employees on accuracy and process controls, demonstrating the ability to document and communicate procedural standards clearly.

Client Account Administrator · BMO InvestorLine

Toronto, ON · Mar 2022 – Aug 2022

  • Maintained and secured physical and digital client records, applying compliance-driven retention and retrieval standards.
  • Provided front-line technical support for document-imaging systems, troubleshooting access and system issues under time pressure.
  • Helped design improved document-management procedures, an early example of process- and control-improvement work.

Developer · Maximilian Family Fund

Toronto, ON · Apr 2020 – Apr 2022

  • Built data-analytics tooling in Python (MongoDB, MySQL, Kibana) to detect statistical anomalies in large datasets, experience directly relevant to security analytics and anomaly/threat detection.
  • Applied statistical fraud-detection techniques, including Benford's Law, to flag irregular data patterns, foundational experience for fraud- and security-analytics work.
  • Created custom data-collection tooling (Beautiful Soup) for independent research from complex sources.
  • Built a Tableau dashboard enabling drill-down analysis of operational data, reflecting strong data-visualization and reporting skills applicable to security dashboards and reporting.

Projects

Stale Account Detector · Python Access-Governance Tool

2026 · github.com/calwong88/stale-account-detector

  • Built a command-line tool that evaluates a directory export against six detection rules and produces a severity-ranked findings report, targeting the standing, unmonitored access that surfaces as findings in SOX and OSFI access reviews.
  • Implemented rules covering stale member and guest sign-ins, accounts never used since creation, disabled accounts still consuming paid licenses, enabled accounts with no manager, and guest invitations never redeemed, with each finding rated by severity and written with enough detail for a reviewer to act on.
  • Scoped the CSV loader as the only component that touches raw input, converting every field to a typed record before evaluation, so a Microsoft Graph loader could run the same rules against a live Entra ID tenant without changing another module.
  • Made reports reproducible by passing the evaluation date into each rule rather than reading the system clock, and covered all six rules with 14 unit tests, including negative cases proving the tool does not flag newly created accounts inside their grace period.

Core Competencies

Security & Confidentiality

Confidentiality, discretion, and sound judgment when handling sensitive client and financial data.

Security & IAM

Identity and access administration concepts, access-control principles, audit and risk-review support, policy adherence.

Financial Services Operations

Account opening and maintenance, service requests, documentation review, reconciliations, quality assurance.

Reliability & Focus

Sustained focus and independent execution on detail-critical, compliance-sensitive tasks.

Certifications

Building a full security credential stack: Security+, A+, IAM Associate, and SecAI+ all earned:

Technical Skills

Education