Senior Analyst, ORM & Third-Party Risk

The Senior Analyst, ORM & Third-Party Risk will report to Manager, Third-Party Risk and primarily support the organization's Third-Party Risk Management program while also contributing to broader Operational Risk Management objectives as needed. This role is responsible for assessing, monitoring, and reporting risks arising from third-party relationships, ensuring suppliers and service providers operate in accordance with the organization's risk appetite, regulatory requirements, and governance standards.

Working closely with business owners, procurement, legal, technology, cybersecurity, compliance, and risk stakeholders, the Senior Analyst provides effective challenge and oversight throughout the third-party lifecycle while supporting operational risk assessments, issue management, resilience considerations, and risk reporting activities.

Key Responsibilities

Third-Party Risk Management

• Support the execution and continuous improvement of the Third-Party Risk Management framework, policies, standards, and procedures.
• Co-ordinate third-party risk assessments across various risk domains, including operational, cyber, information security, privacy, compliance, financial, and resiliency risk.
• Review inherent and residual risks associated with third-party relationships and recommend appropriate mitigation strategies.
• Monitor third-party risk profiles and track remediation activities to ensure identified risks are effectively managed.
• Support ongoing monitoring activities and periodic reassessments of critical and high-risk third parties.
• Partner with procurement, legal, and business stakeholders throughout the onboarding, renewal, and termination processes.
• Prepare third-party risk reporting, metrics, dashboards, and committee materials for management and governance forums.
• Support regulatory examinations, audits, and reviews related to third-party risk management activities.

Operational Risk Management

• Support Operational Risk Management activities, including risk and control assessments, issue management, and risk reporting.
• Assist in identifying, assessing, and monitoring operational risks associated with critical business processes and third-party dependencies.
• Collaborate with Operational Resilience, Business Continuity, Cybersecurity, and Enterprise Risk teams to assess risks associated with critical service providers.
• Participate in the evaluation of concentration risk, fourth-party dependencies, and supply chain resiliency considerations.

Qualifications Required

• Bachelor's degree in Business, Risk Management, Supply Chain Management, or a related field.
• 3-5 years of experience in Third-Party Risk Management, Operational Risk Management, Enterprise Risk, Compliance, Audit, Procurement Risk, or a related discipline.
• Strong understanding of third-party risk management principles and lifecycle activities.
• Experience conducting risk assessments and analyzing control environments.
• Strong analytical, critical thinking, and problem-solving capabilities.
• Excellent written and verbal communication skills.
• Ability to effectively challenge stakeholders and influence risk-informed decision-making.
• Advanced proficiency in Microsoft Excel, PowerPoint, and reporting tools.

Preferred

• Experience within financial services, insurance, healthcare, or other regulated industries.
• Familiarity with operational resilience, business continuity, vendor management, or cybersecurity risk management practices.
• Experience with Governance, Risk, and Compliance (GRC) platforms and third-party risk management tools.
• Working knowledge of industry frameworks and standards related to risk management and third-party oversight.
• Professional certifications such as CRISC, CISA, CISSP, CBCP, MBCI, CTPRP, or equivalent are considered an asset.

Success Measures

• Effective execution of third-party due diligence, risk assessments, and ongoing monitoring activities.
• Timely identification, escalation, and management of third-party risks and control concerns.
• High-quality risk reporting and governance support for leadership and risk committees.
• Strong stakeholder engagement across business, procurement, legal, technology, and risk functions.
• Contribution to a mature and effective risk management program through continuous improvement initiatives and proactive risk oversight.

Broadband Salary Range: $64,000 – 106,000
Our typical is between $80,000 and $85,000. Salary decisions are also dependent on other factors such as your experience, industry benchmarks, internal equity and other role-specific requirements. For critical roles, the compensation offering will be reviewed to ensure alignment with market rate and conditions and the unique value you bring to the role. #LI-NZ2

This posting represents an existing vacancy within our organization.

Il se peut que nous utilisions des outils d'intelligence artificielle dans le cadre de notre processus de recrutement pour aider à la révision initiale des CV. Toutes les décisions d'embauche, y compris l'évaluation, la sélection et la disposition des candidats, sont prises par des recruteurs humains.

À propos de nous

Chez Services Canadian Tire Limitée/Banque Canadian Tire, il est de notre mandat de continuer à créer des solutions financières novatrices et avantageuses pour nos clients. Notre gamme croissante d’articles et de services témoigne de la contribution dynamique de nos employés et notre succès repose sur une vision forte, des clients fidèles et notre capacité à constituer des équipes qui reflètent la diversité des clients et des communautés dans lesquelles nous vivons et travaillons. Joignez-vous à nous, il y a une place pour vous ici!

Notre engagement envers la diversité, l’inclusion et l’appartenance

Nous nous engageons à favoriser un environnement où le sentiment d’appartenance est florissant et où la diversité, l’inclusion et l’équité font partie intégrante de tout ce que nous faisons. Nous croyons en la création d’une culture organisationnelle où les gens sont traités en tout temps avec dignité dans le respect de la religion, de la nationalité, du sexe, de la race, de l’âge, de la capacité perçue, de la langue parlée, de l’orientation sexuelle et de l’identité de chacun. Nous sommes unis dans notre objectif d’être ici pour contribuer à améliorer la vie au Canada.

Accommodements

Nous tenons fermement à notre valeur fondamentale d’inclusion. Nous accueillons et encourageons les candidats issus de groupes en quête d’équité, comme les personnes racisées, les Autochtones, les membres de la communauté 2SLGBTQIA+, les femmes, les personnes handicapées et autres. Si vous avez besoin d’accommodements pour postuler à ce poste ou lors de l’entrevue, veuillez-nous le faire savoir lorsque vous nous contacterez, et nous travaillerons avec vous pour répondre à vos besoins.