Business Analyst – Third Party Risk Management - MFCJP

Position: Business Analyst – Third Party Risk Management - MFCJP00016700
Our client, a leading organization in the financial services industry, is seeking a Business Analyst – Third Party Risk Management to join their team in Toronto, Ontario. This is an exciting opportunity for a risk and compliance professional with experience in vendor risk management, governance, and due diligence activities.
The successful candidate will support the organization’s Third-Party Risk Management (TPRM) program by assessing and monitoring supplier risks across the vendor lifecycle. This role will work closely with business stakeholders, procurement teams, and risk functions to ensure compliance with internal standards and regulatory expectations.
This is a hybrid opportunity based in Toronto, with onsite presence required Tuesday through Thursday.

Advantages

• Opportunity to work with a well-established financial services organization

• Exposure to enterprise-level Third-Party Risk Management initiatives

• Collaborative and professional team environment

• Hybrid work model with a balance of onsite and remote flexibility

• Potential for contract extension and long-term conversion opportunities

• Involvement in governance, compliance, and emerging risk initiatives

Responsibilities
Risk Assessment & Due Diligence

• Conduct inherent risk assessments to evaluate third-party risks based on service criticality, data sensitivity, and regulatory impact

• Perform financial due diligence reviews, including supplier financial health analysis and credit evaluations

• Conduct adverse media and reputational risk screenings

• Assess supplier risk posture and identify areas requiring mitigation or additional due diligence

• Provide guidance and training to business stakeholders and contract owners on third-party risk management practices

Ongoing Monitoring & Governance

• Support ongoing supplier monitoring activities and governance reviews

• Track and manage risk findings, policy exceptions, and remediation activities

• Monitor supplier risk indicators including financial performance, adverse media, and emerging global risks

• Maintain accurate risk documentation and support a consistent risk-based vendor oversight approach

Compliance & Audit Support

• Ensure adherence to internal TPRM policies, standards, and regulatory expectations

• Support compliance activities aligned to frameworks such as OSFI B-10

• Assist with internal and external audit activities, including documentation and remediation tracking

• Maintain complete audit trails and assessment records

Stakeholder Engagement & Program Support

• Partner with procurement teams, business units, and risk stakeholders

• Communicate risk assessment outcomes and recommendations clearly and effectively

• Support continuous improvement initiatives related to TPRM processes, reporting, and governance frameworks

• Stay informed on industry trends, emerging risks, and regulatory developments

Qualifications

Required Qualifications

• 2–5 years of experience in:
oThird-Party Risk Management (TPRM)
oVendor Risk Management
oCompliance, Audit, or Operational Risk

• Hands-on experience conducting:
oInherent risk assessments
oFinancial due diligence reviews
oAdverse media screenings

• Strong understanding of the vendor risk lifecycle, including onboarding, monitoring, and governance

• Strong analytical, communication, and stakeholder management skills

• Bachelor’s degree or equivalent professional experience

Preferred Qualifications

• Familiarity with regulatory frameworks such as OSFI B-10

• Experience reviewing SOC reports, ISO certifications, or similar control documentation

• Experience using TPRM platforms such as Archer, Ivalua, or Process Unity

• Understanding of cybersecurity, information security, and technology-related risks

• Exposure to emerging risks including AI, cloud…