Position: Information Security Consultant (Third Party Management Process Consulting)

Type: 9 month contract + extensions

Client: Enterprise Banking Client

Location: Hybrid - 2 days a week downtown Toronto

Rate: 68.20/hr incorporated is the Max Rate with no flexibility

Role at its core: Consulting on current TPRM Framework process - not hands on TPRM

Must-haves:

- 7+ years information security consulting
- 5+ years TPRM lifecycle experience
- Reporting experience within Power BI, excel - managing KPI's
- Workflow / process mapping experience - documentation & user stories
- OSFI B-10 experience with business continuity, operational resilience, working w/ technology

- Enterprise banking experience
- TPRM process analysis and TPRM Framework analysis

- Stakeholder Mamgemnet

Required Skills & Experience

- 5+ years of recent experience working within a TPRM team at major North American bank
- Solid end-to-end understanding of ThirdParty Risk Management (TPRM) full life cycle of TPRM vendor assessment, ongoing monitoring, and vendor offboarding
- Knowledge of TPRM various categories a bank may be working with such as law firms, consulting firms, technology partners...etc. with the ability to help define category specific frameworks (ex. defining how the vendor risk process would change for different categories such as legal vs. technology vendors).
- Experience working with senior banking stakeholders to define, refine, and operationalize TPRM processes by category.
- Ability to give feedback on how the current and future Target Operating Model (TOM) created by procurement would impact TPRM requirements (example: feedback around how the operating model could align or not align with regulatory bodies, controls, or security risk requirements)




- Proven experience identifying gaps within existing TPRM processes/frameworks
- Hands-on experience supporting regulatory-driven TPRM initiatives, including frameworks (OSFI B-10, Operational Resilience, Business Continuity Management (BCM), FFIEC, and OCC/FFOCC)
- Experience operating in a global environment across regions such as Canada, UK, Luxembourg, Asia (Japan, Hong Kong, Singapore), and offshore jurisdictions (Caribbean, Cayman Islands).
- Reporting experience within Power BI, excel , managing KPI's
- Workflow / process mapping experience - documentation - user stories
- OSFI B-10 experience with business continuity, operational resilience, working w/ technology
- Enterprise banking experience
- TPRM lifecycle experience

Insight Global is looking for a TPRM Security Consultant/ Business Consultant for a contract role with a major financial services company in Toronto. This consultant will assist with identifying risks and controls that may not align with regulatory controls or an ideal TPRM program to ensure that the target operating model the bank is working on is both efficient, makes sense within the TPR categories, but is also risk adverse and aligns with security risks and controls that need to be in place. You will be analyzing and evaluate existing TPRM processes and future TPRM plan across categories to identify gaps, inefficiencies, and regulatory risks.

Support the design and refinement of category-specific TPRM frameworks aligned to the bank’s Target Operating Model. Document current and future state processes, including risks, controls, and recommended improvements. Collaborate with cross-functional stakeholders, including procurement, risk, and regulatory teams, to ensure alignment and effective execution across workstreams.

📌 Information Security Consultant (Third-Party Risk Management Process Consultant) (Toronto)
🏢 Insight Global
📍 Toronto