Business Analyst - MFCJP00017438

Our recruiting agency is currently seeking a driven, analytical Third Party Risk Analyst on behalf of our client, a premier financial institution located in downtown Toronto. This is a high-visibility, hybrid contract position designed to support and strengthen the enterprise Third-Party Risk Management (TPRM) program.

In this role, approximately 80% of your focus will be dedicated to conducting and providing critical, effective challenge of Inherent Risk Questionnaires (IRQs) submitted by Contract Owners and business stakeholders. The remaining 20% will encompass broader risk-monitoring activities, including financial viability reviews, adverse media screenings, ongoing governance, and audit support.

As the gatekeeper of third-party risk, you will ensure that vendor engagements accurately reflect operational realities, service criticality, data sensitivity, and regulatory expectations before due diligence and monitoring paths are locked in. This opportunity is ideal for a proactive risk professional who takes ownership, communicates with confidence, and thrives in a structured, regulated environment.

Advantages
•High-Impact Exposure: Play a core operational role within a sophisticated, enterprise-scale TPRM program at a leading financial institution.
•Hybrid Flexibility: Enjoy a balanced hybrid work model operating out of modern offices situated along Bloor Street in Toronto.
•Contract Longevity: Initial 6-month contract running through June 2027, with high potential for extension or consideration for full-time permanent conversion based on business needs and individual performance.
•Streamlined Interview Process: Direct two-stage evaluation process consisting of one virtual interview followed by an on-site discussion.
•Continuous Professional Development: Deepen hands-on expertise in regulatory alignment (including OSFI Guideline B-10), enterprise GRC platforms, and advanced inherent/residual risk methodologies.

Responsibilities
Inherent Risk Assessment & Due Diligence (Core Focus ~80%)
•Review and deliver robust, effective challenge to Inherent Risk Questionnaires (IRQs) completed by Contract Owners and business units, verifying responses for accuracy, completeness, and internal consistency within established service level agreements (1-day turnaround target).
•Critically evaluate submissions against risk factors such as business criticality, data classification, regulatory reach, and technology dependencies, escalating material discrepancies prior to finalizing inherent risk ratings.
•Perform supplier financial health evaluations, credit risk checks, and adverse/negative media reviews to identify reputational, legal, operational, or compliance exposures.
•Determine required depths of due diligence, ongoing monitoring, and specific risk mitigations based on calibrated inherent risk profiles.
•Guide and educate internal stakeholders on vendor lifecycle requirements, accountability boundaries, and inherent risk evaluation criteria.

Ongoing Monitoring, Governance & Issues Tracking (~20%)
•Execute risk-based periodic monitoring of active third parties in accordance with internal frameworks, paying particular attention to critical and high-risk vendor relationships.
•Track changes in third-party risk profiles—including financial health shifts, operational disruptions, adverse news, and scope alterations—initiating escalations or mitigation strategies as warranted.
•Log, track, and manage open risk findings, control issues, remediation actions, and policy exception requests through to verified resolution.
•Review supporting third-party risk and assurance artifacts, including SOC reports, ISO certifications, and third-party audit reports.

Qualifications
Required Qualifications
•2 to 5 years of hands-on experience in Third-Party Risk Management (TPRM), Vendor Risk Management, Operational Risk, Compliance, or Internal/External Audit.
•Demonstrated track record of independently executing and effectively challenging Inherent Risk Assessments (IRQs) and evaluating residual risk.
•Proven ability to analyze disparate sources of risk information—including financial indicators, adverse news, and third-party documentation—and synthesize findings into a coherent risk viewpoint.
•Strong critical-thinking capabilities with the confidence to professionally push back on stakeholders when data is incomplete, contradictory, or inadequately supported.
•Ability to articulate past risk scenarios during the interview process, detailing specific risks identified, frameworks used, and remediation approaches taken.
•Excellent verbal and written communication skills, with an aptitude for translating complex risk principles into actionable guidance for non-risk professionals.

Preferred Qualifications & Assets
•Prior experience operating within a federally regulated financial institution, bank, or insurance environment.
•Practical working knowledge of OSFI Guideline B-10 or comparable third-party risk management regulatory standards.
•Familiarity with enterprise Governance, Risk, and Compliance (GRC) tools such as Archer, Ivalua, or ProcessUnity.
•Foundational literacy in technology risk domains, including information security, cloud hosting, business continuity, or emerging AI/technology risks.
•Relevant industry certifications are considered a strong asset (e.g., Certified Third-Party Risk Professional [CTPRP], CRISC, CISA, or related risk/compliance credentials).

Summary
This position offers an immediate opportunity for an ambitious Third Party Risk Analyst to make a tangible mark on our client’s risk posture. If you are a collaborative problem-solver who takes initiative, approaches assessments with an investigative eye, and is eager to showcase your TPRM acumen within a major corporate environment, we encourage you to submit your application. Candidates will be assessed on their practical risk analysis capabilities and will be expected to discuss real-world examples of their risk-challenging experience during the interview stages.

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to [email protected] to ensure their ability to fully participate in the interview process.

This posting is for existing and upcoming vacancies.