One of Client is looking to add a Third Party Risk & Governance Analyst to their team.
This person will sit within the Procurement/Vendor Management department and will help do Third-Party risk assessments and govern vendors. This is not a role specific to Technology - they will engage with all types of vendors.
Its a hybrid role 2 days a week in office (Tuesday, Wednesday), downtown Toronto. Its a 6 months contract to start with a potential to extend or convert into a full time role.
Responsibilities:
- Lead and coordinate TPRM assessments for vendor onboarding, renewals, ongoing monitoring, and offboarding
- Partner with Business Owners, Privacy, Security, Legal, Compliance, Procurement, and vendors to identify, assess, and mitigate third-party risks
- Manage vendor criticality assessments, due diligence reviews, risk remediation plans, and risk exceptions
- Monitor supplier performance through scorecards, metrics, and Quarterly Business Reviews (QBRs) for strategic suppliers
- Track and manage incidents, issues, corrective action plans, concentration risk, and ongoing risk mitigation activities
- Develop and maintain Exit Plans and Business Continuity Plans based on vendor criticality and risk tier
- Maintain the TPRM Inventory and ensure vendor risk records, due diligence documentation, and governance activities remain current
- Support audits, regulatory requirements, and adherence to TPRM Policy
Mandatory Skills:
- 3-5 years of experience in Third-Party Risk Management, Vendor Risk Management, Governance, Compliance, Procurement, or Operational Risk
- Experience managing vendor due diligence, risk assessments, ongoing monitoring, and remediation activities
- Strong stakeholder management skills and the ability to collaborate across business, risk, and vendor teams
- Strong analytical, organizational, and communication skills
- Experience supporting technology, SaaS, cloud, or managed service providers is an asset
Nice to Have:
- Experience supporting financial services, insurance, healthcare, or other regulated environments.
- Understanding of OSFI B-10, third-party risk management principles, operational resilience, or enterprise risk management frameworks.
- Experience facilitating QBRs, vendor scorecards, and performance monitoring programs.
- Exposure to SaaS, cloud, managed services, and technology supplier ecosystems.
