Director, Third Party Risk Management – Quality Assurance & Governance (Line 1B

We are seeking a highly experienced and strategic leader to join our Third Party Risk Management (TPRM) function as a Director, Line 1B. This role is accountable for leading the Quality Assurance and governance oversight function across Vendor Information Security Management (VISM), Vendor Governance Management (VGM), and Sourcing.

The Director will lead and manage a team, providing clear direction, oversight, and ongoing development, while ensuring procurement-related third-party risk activities are executed in line with internal policies, audit expectations, and regulatory requirements.

The successful candidate will bring deep expertise in audit, regulatory compliance, and Risk & Control Self-Assessment (RCSA) and will serve as a key point of contact for regulators (e.g., OSFI), Internal Audit, and Second Line Risk. This role requires a strong, confident leader with a strategic and critical mindset, capable of influencing stakeholders, challenging constructively, and delivering consistent, high-quality outcomes.

• Lead and execute a comprehensive Quality Assurance Program across VISM, VGM, and Sourcing teams

• Ensure all activities are completed in accordance with defined TPRM processes, system requirements, and documentation standards

• Identify, challenge, and escape non-compliance, including:

  • Contracts executed prior to completion of required risk assessments

• Perform effective challenge on risk assessments, including PSQ outputs that did not trigger IRQ where further review is warranted

• Own and lead all Procurement-related RCSAs, including design, execution, and ongoing monitoring

• Ensure risks and controls are clearly defined, consistently applied, and aligned to enterprise and regulatory expectations

• Provide clear, defensible articulation of risk positions using audit and regulatory language

• Oversee governance of:

  • Key Risk Indicators (KRIs)

  • Centralized issues management and remediation tracking

• Risk data accuracy and reporting integrity

• Act as a primary point of contact for:

  • Regulators (including OSFI), Internal Audit, and Line 2 Risk

• Lead responses to:

  • Regulatory reviews and examinations

  • Internal audit inquiries and testing

  • Supplier due diligence and external questionnaires

• Ensure all outputs are accurate, consistent, evidence-based, and defensible

• Develop and maintain TPRM guidelines, processes, and playbooks aligned to regulatory expectations

• Provide guidance to business units on:

  • Handling supplier confidential documentation requests

  • Application of TPRM requirements in complex or non-standard scenarios (e.g., exceptions, travel-related vendors)

• Lead, manage, and develop a high-performing team, providing clear direction, priorities, and performance expectations

• Set and execute a strategic vision for Quality Assurance and TPRM governance

• Foster a culture of accountability, integrity, and continuous improvement

• Apply a critical and independent mindset to challenge processes, identify gaps, and strengthen the control environment

• Build team capability through training, coaching, and ongoing development

• Partner with senior stakeholders across Procurement, Risk, and Business Units to influence outcomes and strengthen risk management practices

• 10+ years of experience in Third Party Risk Management (TPRM), Operational Risk, Audit, or Compliance

• Deep expertise in:

  • Audit practices and regulatory expectations

  • RCSA frameworks, control design, and risk assessment methodologies

• Strong experience engaging with:

  • Regulators (e.g., OSFI)

  • Internal and external audit functions

• Proven ability to communicate complex risk positions using audit-grade, regulator-ready language

• Demonstrated experience leading and managing teams and delivering high-quality outcomes

• Strong leadership and people management capability

• Strategic thinking with a forward-looking risk mindset

• Critical thinking and effective challenge capability

• Executive presence and strong stakeholder influence

• Fluency in audit and regulatory language…