
Senior Analyst, Vendor Third Party Risk
- Toronto, ON
- Permanent
- Full-time
- Stimulating work in a fast-paced and intellectually challenging environment
- Accelerated exposure and responsibility
- Global career development opportunities
- Diverse and inspiring colleagues and approachable leaders
- A hybrid-flexible work environment with an emphasis on in-person collaboration
- A culture rooted in principles of integrity, partnership, and high performance
- An organization with an important social purpose that positively impacts lives
- Support the execution of CPP Investments Third-Party risk management program
- Continue to enhance standardized third-party risk management processes and lead the vendor risk assessment and due diligence process
- Support stakeholders (Business Units, Risk SMEs, etc.) by providing guidance related to any TPRM program methodology
- Manage and monitor for accuracy the information risk questionnaires of third-party vendors, which would
- Collaborate with risk subject matter experts to strengthen and continually improve CPP Investments control framework
- Assist with third-party due diligence process ensuring processes are followed which may include liaising with vendors and internal stakeholders to ensure vendor risk questionnaires and assessments are completed
- Identify issues and monitor trends, to support ongoing vendor management As required, support the execution of the wider Risk & Controls work program, including internal audits, enterprise risk assessment processes and other consulting / project work.
- Track and report on the status and results of third-party risk assessments, oversee remediations resulting from risk assessment activities including ongoing monitoring, audits and remediation actions; Review aggregate third party issues and incident tracker
- Provide guidance and support to business owners on third party risk management best practices and standards
- Support reporting requirements to key risk stakeholders
- Support execution of ongoing monitoring program conducted by Business Units
- Experience managing third party risk assessment and due diligence processes within Process Unity or an equivalent platform
- Bachelor's degree in business, finance, risk management, or related field
- Minimum of 3 years of experience in third party risk management, vendor management, or audit
- Knowledge of third-party risk management frameworks, methodologies, and tools and relevant regulatory guidelines
- Ability to analyze and interpret complex data and information
- Strong communication, presentation, and interpersonal skills
- Proficiency in Microsoft Office applications
- Certification in third party risk management, such as Canadian Risk Management Designation (CRM) would be beneficial but not required
- Ability to work under pressure, resolve problems and make decisions quickly and effectively, using a strong sense of self confidence.