Third Party Risk Management Lead (Fixed-Term 6 months

Position: Third Party Risk Management Lead (Fixed-Term 6 months)
At Coast Capital, we’re not dreaming about a better future, we’re building one.
Part of the Coast Capital Savings Federal Credit Union family of brands, we’ve been unlocking financial opportunities that positively impact people and communities for more than 85 years. We believe that every Canadian deserves a financial partner who actually cares how things turn out and driven by our social purpose, we look at everything we do through the lens of how we can help our members, employees, and communities.

We’re deeply committed to making our financial cooperative a great place to work—Coast Capital is a platinum member of Canada’s Best Managed Companies and one of Canada’s Most Admired Corporate Cultures.
Third Party Risk Management Lead (Fixed-Term 6 months)  Jul 30, 2026
Location(s):  Help Headquarters
Job Type:  Full Time Regular
myWork Program:  Hybrid
Starting Salary Range:  $73,800.00 - $92,300.00
Background Screening Requirement   Enhanced Criminal Record Check
Credit Check
Identity Verification
Employment Verification
References
Job Purpose  The Third Party Risk Management Lead supports Coast Capital’s Third Party Risk Management (TPRM) program within Strategic Supplier Sourcing. This role is responsible for coordinating end-to-end supplier risk assessments, facilitating due diligence activities, and ensuring third-party relationships are managed in accordance with Coast Capital’s risk appetite, governance framework, and regulatory requirements. Working closely with Strategic Sourcing, Information Security, Privacy, Finance, Legal, and Operational Risk teams, the incumbent assesses and monitors supplier risks throughout the vendor lifecycle, supports policy and framework development, and maintains centralized vendor risk information and reporting.

This role plays a key part in strengthening supplier governance, regulatory compliance, and sustainable business decision-making.
This is a 6-month Fixed Term position. This role is primarily remote, with occasional in-office attendance based on business needs. The role may be based out of our Surrey, BC or Toronto, ON office. The incumbent will typically attend in-person meetings approximately once every two months
Accountabilities   Support and administer the Third Party Risk Management program and related governance processes.
Conduct and validate inherent risk assessments for vendor engagements.
Perform preliminary information security, privacy, financial, and operational risk assessments.
Facilitate end-to-end supplier risk assessments, including due diligence, residual risk determination, and approvals.
Partner with business owners and risk subject matter experts to identify, assess, and mitigate supplier risks.
Provide risk analysis and recommendations that support informed business decisions and sustainable outcomes.
Maintain a centralized vendor repository including vendor profiles, contracts, risk assessments, and supporting documentation.
Monitor supplier risks throughout the lifecycle of vendor relationships and track remediation activities.
Support the development, implementation, and continuous improvement of third-party risk policies, procedures, and frameworks.
Maintain risk registers and assessment tools to track, monitor, and report on supplier risks and controls.
Ensure compliance with applicable regulatory requirements and industry guidelines, including OSFI, AML/ATF, and Basel expectations.
Prepare risk reports, portfolio monitoring tools, audit responses, and management reporting.
Support internal and external audits through the collection and validation of risk documentation and evidence.
Contribute to supplier governance and transformation initiatives that improve risk management effectiveness and operational efficiency.

Skills & Qualifications   Bachelor’s degree in business, Economics, Risk Management, Information Security, Finance, or a related discipline.
Professional certification or designation in Risk Management, Information Security, or Privacy is considered an asset.
4–6+ years of experience in Third Party Risk Management, Vendor Risk Management, Audit, Information Security, Privacy, or Operational Risk.

Experience with in Banking,…