Venture outside the ordinary - TMX Careers The TMX group of companies includes leading global exchanges such as the Toronto Stock Exchange, Montreal Exchange, and numerous innovative organizations enhancing capital markets. United as a global team, we’re connecting cross-functionally, traversing industries and geographies, moving opportunity into action, advancing global economic growth, and propelling progress. Through a rich exchange of ideas, meaningful collaboration, and a nimble operating model, we power some of the nation’s most critical systems, fueling capital formation and innovation, bringing increased opportunity to business visionaries, product ingenuity to consumers, and career exploration to our team.
Ready to be part of the action? Join a pivotal second-line position at the heart of Canada’s financial market infrastructure.
As a Senior Analyst, Enterprise Risk Management, you will support the delivery of the Enterprise Risk Management (ERM) and Operational Resilience programs across the Canadian Depository for Securities (CDS)-Canada's central securities depository, clearing, and settlement hub—and the Canadian Derivatives Clearing Corporation (CDCC)-the national central counterparty for exchange-traded and over-the-counter derivatives—collectively known as TMX Post-Trade. You will play a vital role in safeguarding the organization by proactively identifying, assessing, and mitigating significant non-financial risks across complex vendor and regulatory landscapes. This position carries a primary focus on advancing the Third-Party Risk Management (TPRM) program through comprehensive risk assessments and continuous framework evolution, while driving critical regulatory initiatives and facilitating end-to-end incident reporting. This role reports to: Manager, Enterprise Risk Management & Non-Financial Resilience
Job Location: Hybrid (2-3 days in office)-we are open to candidates being located in one of our Canadian office locations: Toronto or Montreal.
Key Responsibilities: Third Party Risk Management (TPRM) Support the Manager, ERM in developing and maintaining the TPRM governance framework, ensuring alignment with CDCC and CDS risk appetite.
Support the efficient and effective implementation of the TPRM program across CDCC and CDS, including performing materiality assessment and risk-based due diligence on vendors onboarded as part of recent business initiatives and BAU.
Provide guidance and training to Business Units on the requirements and responsibilities included in the TPRM governance.
Contribute to the preparation and delivery of the quarterly reporting process on the third-party risk profile.
Assist in the deployment and application of new tools to automate and optimize third-party monitoring and reporting processes.
Support the Manager, ERM in driving continuous improvement of Post-Trade's TPRM program by analyzing industry trends and benchmarking against evolving global regulations (i.e. DORA), operational resilience and regulatory compliance.
Regulatory Initiatives & Reviews Support the Manager, ERM in addressing non-financial risk regulatory inquiries related to regulatory initiatives and reviews.
Support the Manager,



ERM in developing and implementing emerging best practices that align with both regulatory requirements and broader industry standards.
Support the Manager, ERM in monitoring and analyzing internal and external environments to identify emerging risks that may impact TMX Post-Trade's strategic objectives and risk profile, and report to senior management.
Incident Reporting Facilitate the end-to-end incident reporting process, ensuring risk events are accurately documented, tracked, and escalated in a timely manner.
Support root cause analyses of identified incidents and partnering with business units to track the implementation of corrective action plans.
Collaborative Opportunities Across Enterprise Risk Management Programs: While the primary focus is on Third Party Risk Management (TPRM) and Regulatory Initiatives & Reviews, there may be opportunities to contribute in a supportive role to initiatives within:
Operational Risk Management (ORM): Support risk assessment and oversight for operational activities.
Monitor key risk indicators, and analyze operational risk data to identify trends and inform strategic decisions.
Change Management Risk Evaluation (CMRE): Support the identification, assessment, and oversight of the overall risk profile associated with significant changes and projects.
Monitor adherence to change procedures and facilitate post-implementation reviews.
Cyber Risk Management: Collaborate with the Information Security Office to track cyber threats, cyber incidents, and remediation efforts.
Assist in embedding cyber risk considerations into broader risk programs and contribute to executive cybersecurity reporting.
Business Continuity Management: Coordinate and maintain Business Impact Analyses (BIA) and Business Continuity Plans (BCP).
Provide training and oversight for Disaster Recovery (DR) and BCP testing.
Must haves: Education: Bachelor’s degree in Finance, Business Administration, or a related field (Master’s degree preferred).
Experience: Minimum of 3 years of relevant experience in risk management, audit, or compliance functions within financial services or consulting firms.
Core Risk Expertise: Proven track record delivering ERM/ORM projects, including Operational Resilience, Risk Appetite, Third-Party Risk Management, Internal Controls, Business Continuity Management, Crisis Management, and Cybersecurity concepts.
Domain Knowledge: Solid understanding of financial institutions, market infrastructures, and financial markets.
Communication Skills: Exceptional written and verbal communication skills, with the ability to articulate complex risk concepts clearly and concisely to diverse audiences.
Execution & Ownership: Proven ability to work independently across multi-stakeholder environments, manage competing priorities effectively, and drive deliverables to completion with a proactive, results-oriented approach.
Nice to Haves: Certifications:



Professional designations in Operational Risk Management, Business Continuity Management, Third-Party Risk Management, and/or Cyber Risk Management (e.g., ORM, CBCP, MBCI).
Regulatory Familiarity: Knowledge of key regulatory frameworks (e.g., CPMI-IOSCO Principles for FMIs, OSFI B-10, etc.).
Language Skills: Fluency in both French and English (written and spoken) is an asset to support regular interaction with bilingual partners and stakeholders.
Salary Range: 85K/year - 90K/year CAD. Please note that the salary range included is a guideline only. The salary offered may vary based on factors, including, but not limited to, the successful candidate’s relevant knowledge, skills, and experience.
We provide accommodations for applicants and employees who require it.
TMX is committed to creating and sustaining a collegial work environment in which all individuals are treated with dignity and respect and one which reflects the diversity of the community in which we operate. Please note that our company is not currently sponsoring work permit applications and the applicant must be authorized to work in the country where this position is located.
Notre culture: Les sociétés membres du Groupe TMX comprennent de grandes bourses mondiales comme la Bourse de Toronto et la Bourse de Montréal, ainsi qu’un bon nombre d’organisations innovantes qui améliorent les marchés financiers. Regroupés au sein d’une même équipe, nous nouons des liens interfonctionnels et enjambons les barrières sectorielles et géographiques, désireux de concrétiser des occasions, de contribuer au progrès et de participer à la croissance économique mondiale. Le fourmillement d’idées, la franche collaboration et le modèle d’exploitation agile nous permettent de propulser des systèmes nationaux essentiels, d’alimenter la formation de capital et l’innovation, ainsi que d’offrir une foule de possibilités aux entrepreneurs visionnaires, des produits innovants aux consommateurs et une riche carrière à notre personnel. Ferez‑vous le saut? Nos activités: Le Groupe TMX exploite des marchés mondiaux. Il met au point des solutions d’analyse et bâtit des communautés numériques appuyant le financement, la croissance et la réussite des entreprises, des négociateurs et des investisseurs. Les principales activités du Groupe TMX comprennent la Bourse de Toronto, la Bourse de croissance TSX, la Bourse Alpha TSX, le Caisse canadienne de dépôt de valeurs, la Bourse de Montréal, la Corporation canadienne de compensation de produits dérivés, Trayport et VettaFi, qui offrent des marchés d'inscription, des marchés de négociation, des mécanismes de compensation, des services de dépôt, des solutions technologiques, des produits d’information et d’autres services à la communauté financière mondiale. Le Groupe TMX a son siège social à Toronto et des bureaux dans l’ensemble de l’Amérique du Nord (Montréal, Calgary, Vancouver et New York), ainsi que dans des marchés internationaux clés, dont Londres, Singapour et Vienne. Pour en savoir plus sur le Groupe TMX, visitez le www.tmx.com. Suivez le Groupe TMX sur le réseau social X : @TMXGroup.

#J-18808-Ljbffr

📌 Senior Analyst, Enterprise Risk Management (Third-Party Risk & Regulatory Initiative Focus) (Ontario)
🏢 TMX Group
📍 Ontario