Manager, Third Party Risk

What you'll do:

Key Responsibilities

Governance & Oversight

• Support the ongoing enhancement and operationalization of the enterprise TPRM framework, standards, procedures, and governance processes

• Conduct oversight and challenge of third-party risk activities across onboarding, reassessment, monitoring, renewal, and termination activities

• Coordinate and support TPRM governance committees, risk forums, and escalation activities

• Monitor adherence to TPRM standards, operational SLAs, and regulatory expectations

• Support development and maintenance of TPRM operating standards and lifecycle governance controls

Risk Monitoring & Reporting

• Develop and maintain TPRM dashboards, metrics, KRIs, and executive reporting

• Support monthly reporting on vendor risk exposures, SLA breaches, incidents, outages, remediation status, and concentration risks

• Track and escalate overdue assessments, unresolved risk issues, and remediation activities

• Support development of board and committee reporting materials

• Monitor vendor lifecycle activities and ongoing risk exposure trends

Lifecycle & Ongoing Monitoring

• Coordinate cyclical reassessment activities based on vendor criticality and inherent risk

• Support ongoing monitoring activities including review of:

  • SOC reports

  • BCM/DR evidence

  • control attestations

  • SLA performance

  • incidents and operational disruptions

• Support governance activities related to vendor renewals, material changes, and exits

• Assist in development of concentration risk and critical dependency inventories

Process Improvement & Operationalization

• Identify opportunities to streamline TPRM workflows, assessments, and intake processes

• Support implementation of risk-based due diligence and assessment methodologies

• Partner with Procurement, Legal, SMEs, and business stakeholders to improve process efficiency and accountability

• Support workflow enhancement initiatives, automation opportunities, and tooling improvements

• Assist with implementation of operational SLAs, escalation triggers, and remediation governance

Stakeholder Engagement

• Act as a key liaison between ERM, Procurement, Legal, SMEs, and business stakeholders

• Support first-line business owners in executing vendor governance responsibilities

• Coordinate stakeholder meetings, issue follow-ups, and governance activities

• Provide guidance and training on TPRM processes and requirements

What you bring:

• 5–8+ years of experience in: Third-Party Risk Management, Operational Risk, Enterprise Risk Management, Vendor Governance, Operational Resilience

• Experience operating within regulated financial institutions

• Strong understanding of: OSFI B-10, operational resilience principles, risk governance frameworks, third-party lifecycle management

• Experience developing governance reporting, KRIs, and executive dashboards

• Experience coordinating cross-functional risk assessments and remediation activities

• Strong stakeholder management and organizational skills

• Strong written communication and presentation skills

• Experience with TPRM platforms and workflow tools (e.g., ProcessUnity, Archer, ServiceNow, OneTrust, Coupa, etc.) is an asset

• Experience implementing or enhancing risk-based assessment methodologies

• Familiarity with Operational Resilience frameworks, concentration risk management, SLA governance, vendor lifecycle governance is an asset

• Relevant certifications considered an asset: CTPRP, CRISC and CISA

We’re always looking for great talent! In addition to competitive pay, we offer:

• Comprehensive benefits and retirement programs

• Performance incentives, Continuing Education Programs

• Other perks to support your well-being

• Career growth opportunities and product discounts

Broadband Salary Range: $79,000 – $131,000.

Our typical hiring range is between $79,000 and $105,000. Salary decisions are also dependent on other factors such as your experience, industry benchmarks, internal equity and other role-specific requirements. For critical roles, the compensation offering will be reviewed to ensure alignment with market rate and conditions and the unique value you bring to the role.

We may use artificial intelligence tools as part of our recruitment process to assist in the initial screening of resumes. All hiring decisions, including candidate evaluation, selection, and disposition, are made by human recruiters.

About Us

At Canadian Tire Services Limited/Canadian Tire Bank, it is our mandate to continue to create innovative and rewarding financial solutions for our customers. Our growing suite of products and services showcase the dynamic contributions from our employees and our success is driven by a strong vision, loyal customers, and our ability to build teams that reflect the diverse customers and communities in which we live and work. Join us, where there's a place for you here.

Our Commitment to Diversity, Inclusion and Belonging

We are committed to fostering an environment where belonging thrives, and diversity, inclusion and equity are infused into everything we do. We believe in building an organizational culture where people are consistently treated with dignity while respecting individual religion, nationality, gender, race, age, perceived ability, spoken language, sexual orientation, and identification. We are united in our purpose of being here to help make life in Canada better..

Accommodations

We stand firm in our Core Value that inclusion is a must. We welcome and encourage candidates from equity-seeking groups such as people who identify as racialized, Indigenous, 2SLGBTQIA+, women, people with disabilities, and beyond. Should you require any accommodation in applying for this role, or throughout the interview process, please make them known when contacted and we will work with you to help meet your needs.