About this role
Job Description
Third-Party Risk Management Analyst (TPRM) ? Vendor Risk & Due Diligence
Take the next step in your career in the insurance sector for our client, where you will contribute to third-party risk management across the vendor lifecycle. Put your risk assessment and analytical skills to work while supporting due diligence, ongoing monitoring, governance, and continuous improvement in a regulated environment.
What is in it for you
? Salaried: $42-47 per hour.
? Incorporated Business Rate: $50-55 per hour.
? 6-month contract.
? Full-time position: 37.50 hours per week.
? Hybrid: 3 days/week in Toronto office.
Responsibilities
? Conduct and provide effective challenge of Inherent Risk Questionnaires completed by Contract Owners and business stakeholders, assessing whether responses are accurate, complete, internally consistent, and appropriately reflect the nature of the supplier engagement.
? Challenge responses where information appears incomplete, inconsistent, or does not appropriately reflect service criticality, data sensitivity, technology dependencies, regulatory impact, or other relevant risk considerations.
? Ensure the Inherent Risk Questionnaire appropriately identifies the supplier?s inherent risk, as this assessment determines the scope and level of required due diligence and ongoing monitoring.
? Escalate material gaps, inconsistencies, or unresolved concerns before the inherent risk assessment is finalized.
? Perform financial due diligence, including reviews of supplier financial health, financial risk indicators, and credit information.
? Conduct adverse and negative media reviews to identify potential reputational, legal, regulatory, or operational concerns.
? Assess supplier risk information and identify areas requiring additional due diligence, escalation, or risk mitigation.
? Review relevant third-party risk documentation and supporting evidence to assess completeness and identify potential risk concerns.
? Provide guidance to Contract Owners and business stakeholders on third-party risk management requirements and their responsibilities throughout the vendor lifecycle.
? Conduct risk-based ongoing monitoring of third parties in accordance with established policies, standards, and monitoring requirements.
? Monitor supplier risk indicators, including financial health and performance, adverse and negative media, emerging global risks, and material changes to the supplier or services provided.
? Assess changes in supplier risk and determine whether additional review, escalation, or risk mitigation is required.
? Support periodic supplier reviews and maintain clear documentation of the supplier?s current risk posture.
? Track risk findings, issues, remediation actions, and policy exceptions through resolution.
? Identify and escalate material changes in supplier risk in accordance with established governance requirements.
? Support a consistent, risk-based approach to third-party oversight, with appropriate focus on higher-risk and critical suppliers.
? Support adherence to internal Third-Party Risk Management policies, standards, procedures, and governance requirements.
? Support compliance with applicable third-party risk regulatory requirements, including OSFI Guideline B-10, where relevant.
? Assist with internal audit, external audit, regulatory reviews, and other assurance activities, including evidence gathering and remediation tracking.