Business Analyst – Third Party Risk Management - MFCJP00016700

Our client, a leading organization in the financial services industry, is seeking a Business Analyst – Third Party Risk Management to join their team in Toronto, Ontario. This is an exciting opportunity for a risk and compliance professional with experience in vendor risk management, governance, and due diligence activities.
The successful candidate will support the organization’s Third-Party Risk Management (TPRM) program by assessing and monitoring supplier risks across the vendor lifecycle. This role will work closely with business stakeholders, procurement teams, and risk functions to ensure compliance with internal standards and regulatory expectations.
This is a hybrid opportunity based in Toronto, with onsite presence required Tuesday through Thursday.


Advantages
•Opportunity to work with a well-established financial services organization
•Exposure to enterprise-level Third-Party Risk Management initiatives
•Collaborative and professional team environment
•Hybrid work model with a balance of onsite and remote flexibility
•Potential for contract extension and long-term conversion opportunities
•Involvement in governance, compliance, and emerging risk initiatives


Responsibilities
Risk Assessment & Due Diligence
•Conduct inherent risk assessments to evaluate third-party risks based on service criticality, data sensitivity, and regulatory impact
•Perform financial due diligence reviews, including supplier financial health analysis and credit evaluations
•Conduct adverse media and reputational risk screenings
•Assess supplier risk posture and identify areas requiring mitigation or additional due diligence
•Provide guidance and training to business stakeholders and contract owners on third-party risk management practices

Ongoing Monitoring & Governance
•Support ongoing supplier monitoring activities and governance reviews
•Track and manage risk findings, policy exceptions, and remediation activities
•Monitor supplier risk indicators including financial performance, adverse media, and emerging global risks
•Maintain accurate risk documentation and support a consistent risk-based vendor oversight approach

Compliance & Audit Support
•Ensure adherence to internal TPRM policies, standards, and regulatory expectations
•Support compliance activities aligned to frameworks such as OSFI B-10
•Assist with internal and external audit activities, including documentation and remediation tracking
•Maintain complete audit trails and assessment records

Stakeholder Engagement & Program Support
•Partner with procurement teams, business units, and risk stakeholders
•Communicate risk assessment outcomes and recommendations clearly and effectively
•Support continuous improvement initiatives related to TPRM processes, reporting, and governance frameworks
•Stay informed on industry trends, emerging risks, and regulatory developments


Qualifications
Required Qualifications
•2–5 years of experience in:
oThird-Party Risk Management (TPRM)
oVendor Risk Management
oCompliance, Audit, or Operational Risk
•Hands-on experience conducting:
oInherent risk assessments
oFinancial due diligence reviews
oAdverse media screenings
•Strong understanding of the vendor risk lifecycle, including onboarding, monitoring, and governance
•Strong analytical, communication, and stakeholder management skills
•Bachelor’s degree or equivalent professional experience

Preferred Qualifications
•Familiarity with regulatory frameworks such as OSFI B-10
•Experience reviewing SOC reports, ISO certifications, or similar control documentation
•Experience using TPRM platforms such as Archer, Ivalua, or ProcessUnity
•Understanding of cybersecurity, information security, and technology-related risks
•Exposure to emerging risks including AI, cloud technologies, and global operational risks


Summary
This is an excellent opportunity for a risk and compliance professional looking to grow within a mature Third-Party Risk Management environment. The ideal candidate will bring strong vendor risk assessment experience, attention to detail, and the ability to collaborate effectively across business and risk teams. Candidates with experience in governance, compliance, and supplier monitoring within regulated industries will be highly regarded.

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to accessibility@randstad.ca to ensure their ability to fully participate in the interview process.