Third Party Risk Management Advisor

Our Story & Purpose:

We’re Vancity, a member-owned credit union built on the principles of inclusion and social justice. Since 1946, our relentless commitment to these values has helped us challenge the status quo and break down barriers. We’ve made bold commitments to become net-zero by 2040 across all mortgages and loans, and we’re actively pursuing strategies in Indigenous banking and financial resilience for our members.

As the largest private sector Living Wage Employer in Canada, we’re proud to be consistently recognized as one of the country’s Top Employers. If you’re ready to join our team of 2,300 diverse individuals, access competitive rewards and benefits, and be part of a greater movement - apply today!

Your Role in Supporting Our Members:

As a Third-Party Risk Management Advisor, you will play a key role in strengthening Vancity’s operational resilience by implementing and sustaining enterprise-wide operational risk and third-party risk management frameworks. This role provides independent second line oversight and challenge, with direct impact on safeguarding our members, supporting regulatory compliance, and promoting a strong risk-aware culture across the organization. We are seeking a risk professional with strong operational risk management expertise, excellent analytical skills, and a collaborative approach to influence sound risk practices across the business.

This is a Full-time, Permanent role based at our Vancity head office. While this position provides a hybrid work arrangement, you will be expected to be on-site for events and business demands.

How You'll Make an Impact:

• Support the continued evolution of Vancity’s Third-Party Risk Management Program and Framework, helping to establish sustainable governance, controls, reporting, and oversight capabilities, and practices in alignment with regulatory expectations and industry best practices.
• Support the continued development, implementation, and enhancement of TPRM policy, procedures, tools, methodologies, and reporting capabilities.
• Translate regulatory requirements and industry best practices into practical frameworks, policies, standards, procedures, and guidance.
• Provide independent 2nd line oversight and challenge of 1st line criticality and risk triage (CRT), risk assessment, and risk mitigation plans.
• Review and challenge risk acceptance recommendations and policy exceptions to ensure alignment with risk appetite and regulatory expectations.
• Evaluate the effectiveness and maturity of the TPRM processes and controls, identifying opportunities to strengthen governance, oversight, and regulatory compliance while streamlining the user experience.
• Lead the design and enhancement of procedures, standards and tools that support the consistent application of TPRM requirements across the organization.
• Contribute to the development and continuous improvement of broader Operational Risk Management and Operational Resilience programs, including RCSA, Operational Risk Events, Issues Management, KRIs, and other initiatives aligned with OSFI E-21 expectations.
• Aggregate and analyze third-party risk information and prepare reporting for the Operational Risk Committee, Risk Management Committee, and the Board
• Support the development and monitoring of third-party key risk indicators.
• Build effective relationships with Strategic Procurement, IT, Legal, Compliance and Privacy teams.
• Support risk owners in understanding and fulfilling their first line accountabilities while maintaining independent oversight.
• Develop and deliver enterprise-wide training, awareness, and change management activities that support the adoption of third-party risk management practices across the organization.
• Promote a strong risk culture by increasing awareness of third-party risk ownership, good risk management practices and regulatory expectations.

What You’ll Bring to the Team:

• 5+ years of experience in Third-Party Risk Management, Operational Risk Management, Vendor Risk Management, Outsourcing Risk Management, or a related Second Line risk function within a financial institution.
• A post-secondary degree in Business, Finance, Risk Management, or a related field.
• Demonstrated experience applying OSFI Guideline B-10 requirements and other regulatory expectations to third-party risk management, outsourcing arrangements, or operational risk programs.
• Experience supporting, operating, or overseeing a Third-Party Risk Management, Vendor Risk Management, or Outsourcing Risk Management program.
• Experience developing, implementing, or enhancing risk management frameworks, policies, standards, processes, and controls.
• Experience providing independent Second Line oversight, challenge, or review within a risk management, compliance, audit, or control function.
• Experience conducting, reviewing, and challenging criticality assessments, risk assessments, control effectiveness, mitigation plans, policy exceptions, and risk acceptance decisions.
• Experience developing management reporting, key risk indicators, and governance committee materials.
• Strong analytical and problem-solving skills with the ability to identify practical solutions to complex risk and regulatory challenges.
• Proven ability to build relationships and influence stakeholders across diverse business functions.
• Strong written and verbal communication skills, including the ability to present risk insights and recommendations to senior leadership.
• Ability to provide independent oversight, effective challenge, and constructive guidance while maintaining strong collaborative relationships.

Extra Skills That Set You Apart:

• Professional risk designation such as CRM, CRMP, or equivalent
• Experience working within a Canadian financial institution
• Experience supporting Third-Party Risk Management or Operational Risk Management programs.
• Experience implementing or enhancing programs aligned with OSFI or other regulatory expectations.
• Experience supporting Board, Risk Committee, or Senior Leadership reporting.

You’ll Thrive Here If You Are:

• Analytical – You enjoy interpreting complex regulatory and risk information to design practical frameworks
• Collaborative – You build strong partnerships across teams to embed effective risk practices, while remaining comfortable providing effective challenge.
• Program Builder – You enjoy creating practical frameworks, processes, and tools from the ground up and are energized by helping establish and continuously improve an evolving risk management program.
• Detail-oriented – You ensure accuracy in risk assessments, reporting, and policy development
• Purpose-driven – You are motivated by protecting members and supporting Vancity’s values-led mission

We value lived experience, so if you are interested in this role, we encourage you to apply even if you feel your skills don't perfectly align with those listed.

What You’ll Earn:

This role offers a salary range of $86,400 to $111,800 per annum. The midpoint of the salary range is approximately halfway between the minimum and the maximum and represents an employee that possesses full job knowledge, qualifications, and experience for the position. The base pay offered may vary depending on factors such as relevant qualifications, skills, previous experience, and internal equity. As part of our total rewards package, employees may also be eligible for our annual incentive program, subject to program eligibility requirements.

Why You’ll Love Working Here:

A career at Vancity is more than just a job, you’re joining a tradition of change-makers who are creating lasting change for our communities. Beyond base pay, we offer a comprehensive total rewards package to ensure our employees are empowered to thrive:

• Living Wage Employer: We’re the largest private-sector Living Wage Employer in Canada and consistently ranked among Canada’s Top Employers.
• Customizable Benefits: Permanent employees receive flexible benefit packages that can be tailored annually to meet evolving needs.
• Generous Vacation: New employees start with 3-4 weeks of vacation per year, with additional days earned over time.
• Extra Stat Holidays: In addition to BC’s 11 statutory holidays, we offer 2 extra days, plus care days for personal or family illness.
• Immediate Health Coverage: Health and dental benefits begin on your hire date, with three levels of coverage to choose from.
• Defined Benefit Pension: Our retirement plan provides a guaranteed income for life, recognizing that retirement looks different for everyone.

Vancity Talent Programs:

Vancity supports an inclusive hiring process for candidates who self-identify as Indigenous, Black, or Trans. With special permission from the BC Human Rights Commissioner, this initiative provides access to career development opportunities, prioritized job screening, and feedback. Any information you choose to share will be stored securely and used only for recruitment and career development connected to this initiative, in line with the BC Personal Information Protection Act (PIPA). For details, please see our dedicated Talent Programs job posting.

At Vancity we’re committed to creating a welcoming and inclusive workplace to help our people and communities thrive and prosper. Diversity in our workforce is integral so that we can truly represent, understand and respond to our community needs and deliver on our member experience.

We are also committed to an inclusive, barrier-free and accessible recruitment experience for all candidates. If you require any accommodations or support at any stage of the recruitment process (including the application stage), we encourage you to let us know by contacting our Talent Acquisition team at [email protected]. We’re here to work with you to ensure your needs are met promptly and effectively. All requests will be handled with the utmost respect and confidentiality, so you can participate fully in the process.