Job Description
Insight Global is looking for a TPRM Security Consultant for a contract role with a major financial services company in Toronto.
This consultant will assist with identifying risks and controls that may not align with regulatory controls or an ideal TPRM program to ensure that the target operating model the bank is working on is both efficient, makes sense within the TPR categories, but is also risk adverse and aligns with security risks and controls that need to be in place.
You will be analyzing and evaluate existing TPRM processes and future TPRM plan across categories to identify gaps, inefficiencies, and regulatory risks.
Support the design and refinement of category-specific TPRM frameworks aligned to the bank's Target Operating Model.
Document current and future state processes, including risks, controls, and recommended improvements.
Collaborate with cross-functional stakeholders, including procurement, risk, and regulatory teams, to ensure alignment and effective execution across workstreams.
We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day.
We are an equal opportunity/affirmative action employer that believes everyone matters.
Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances.
If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to
[email protected].
To learn more about how we collect, keep, and process your private information,
please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.
Skills and Requirements
- 5+ years of recent experience focused within TPRM
- Strong end-to-end understanding of Third-Party Risk Management (TPRM) full life cycle of TPR vendor assessment, ongoing monitoring, and vendor offboarding
- Experience working within a TPRM team at major North American bank
-
Knowledge of TPRM various categories a bank may be working with such as law firms, consulting firms, technology partners...etc. with the ability to help define category-specific frameworks (ex. defining how the vendor risk process would change for different categories such as legal vs. technology vendors).
- Experience working with senior banking stakeholders to define, refine, and operationalize TPRM processes by category.
- Ability to give feedback on how the current and future Target Operating Model (TOM) created by procurement would impact TPRM requirements such as providing feedback around how the operating model could align or not align with regulatory bodies, controls, or security risk requirements
- Proven experience identifying gaps within existing TPRM processes/frameworks and providing actionable recommendations for improvement.
- Strong documentation skills, with the ability to clearly capture processes, risks, and proposed enhancements.
- Hands-on experience supporting regulatory-driven TPRM initiatives, including frameworks such as OSFI B-10, Operational Resilience, Business Continuity Management (BCM), FFIEC, and OCC/FFOCC.
- Experience operating in a global environment across regions such as Canada, UK, Luxembourg, Asia (Japan, Hong Kong, Singapore), and offshore jurisdictions (Caribbean, Cayman Islands).
- Ability to support and contribute across multiple TPRM workstreams simultaneously.
- Familiarity with Target Operating Model (TOM) design, gap analysis, and issue identification.
- Able to go in office 2x days per week downtown Toronto
📌 TPRM Information Security Consultant (Toronto)
🏢 Insight Global
📍 Toronto