Venture outside the ordinary - TMX Careers The TMX group of companies includes leading global exchanges such as the Toronto Stock Exchange, Montreal Exchange, and numerous innovative organizations enhancing capital markets. United as a global team, we’re connecting cross-functionally, traversing industries and geographies, moving prospect into action, advancing global economic growth, and propelling progress. Through a rich exchange of ideas, meaningful collaboration, and a nimble operating model, we're powering some of the nation's most critical systems, fueling capital formation and innovation, bringing increased opportunity to business visionaries, product ingenuity to consumers, and career exploration to our team. Job Title Senior Risk Specialist, ERM Reporting To Manager, Enterprise Risk Management & Non-Financial Resilience Job Location Hybrid (2-3 days in office) - we are open to candidates being located in one of our Canadian office locations: Toronto or Montreal. Key Accountabilities Operational Resilience: Post-Trade has introduced a new Tier 2 Operational Resilience Policy to increase visibility into key dependencies, prepare for worst-case scenarios, and assess our ability to operate through disruption. Program Implementation: Drive the rollout of the Tier 2 Operational Resilience Policy, increasing visibility into critical business services and their internal/external dependencies. Pilot Execution: Lead the launch of the Operational Resilience pilot to test and validate the proposed framework, documenting findings and driving refinements. Framework Development: Contribute to the formal Operational Resilience Procedure, developing supporting tools, templates, and critical operation dependency maps. Stress Testing: Spearhead scenario development and severe-but-plausible stress testing to ensure the organization remains within impact tolerances during disruptions. Business Continuity & Disaster Recovery: Coordinate the execution of Business Impact Analyses (BIA) and Business Continuity Plans (BCP). Assist with internal and industry-wide Disaster Recovery (DR) and BCP testing. Go-Live Readiness: Manage the full deployment of the Operational Resilience program, coordinating with business units and monitoring remediation actions.



Collaborative Opportunities Across Other Enterprise Risk Management Programs Risk Evaluation (CMRE): support the identification, assessment, and oversight of the risk profile associated with significant changes and projects; monitor first-line adherence to change management procedures; and facilitate post-implementation reviews to capture lessons learned. Risk Taxonomy: support the maintenance and continued evolution of the Post-Trade risk taxonomy, ensuring consistent and comprehensive classification of non-financial risks across CDS and CDCC. Risk Appetite Statement: support the periodic review and refresh of the Risk Appetite Statement, including the calibration of appetite metrics and tolerance thresholds, and the monitoring and escalation of breaches. Top Risk Identification: contribute to the identification, assessment, and monitoring of top and emerging enterprise risks, supporting periodic top-risk reviews with business lines and the Senior Leadership Team. Incident Reporting: Facilitate the end-to-end incident reporting process, ensuring risk events are accurately documented and escalated promptly. Support root cause analyses and partner with business units to track the implementation of corrective action plans. Quarterly ERM Reporting: Prepare quarterly ERM reporting and materials for the Senior Leadership Team, Risk Management Committee (RMC), and Board, aggregating and analyzing risk data into clear insights, trends, and recommendations. Enterprise-wide Training Program: support the development and delivery of the enterprise-wide risk training program to embed risk awareness and strengthen risk culture across the first line. Operational Risk Management: Support risk assessment and oversight for operational activities. Monitor key risk indicators and analyze operational risk data to identify trends and inform strategic decisions. Contributing to the quarterly RCSA, periodic process-based RCSA (pRCSA),



and the monitoring of Key Risk Indicators (KRIs) across TMX Post-Trade. Third Party Risk Management (TPRM): Support the ongoing execution and maturity of the TPRM program by conducting thorough third-party risk assessments across recent business initiatives and BAU, and facilitate continuous program oversight by analyzing risk data to prepare and present comprehensive quarterly reports to senior management. Cyber Risk Management: Collaborate with the TMX Information Security Office and key stakeholders to maintain a comprehensive view of cyber risks impacting Post-Trade by tracking emerging threats, monitoring incidents, and embedding cybersecurity considerations into broader non-financial risk programs like TPRM. Must haves Bachelor’s degree in Finance, Business Administration, or a related field; Master’s degree preferred. Minimum of 5 years of relevant experience in risk management, audit, or compliance functions within the financial services industry or consulting firms. Demonstrated experience delivering ERM and/or Operational Resilience programs, with hands‑on exposure to areas such as risk appetite, risk taxonomy, change management risk evaluation, business continuity, or operational resilience. Exceptional written and verbal communication skills, including the ability to articulate complex risk concepts clearly and concisely to diverse audiences; Proven ability to navigate and influence within a matrixed organizational structure, effectively coordinating with multiple stakeholders across different business units; Proven ability to work independently, manage multiple priorities effectively, and drive tasks to completion with minimal supervision; A proactive and results‑oriented approach, demonstrating ownership and accountability for assigned responsibilities; Excellent interpersonaland collaboration skills, with a demonstrated ability to work effectively within a team environment. Nice to haves Certifications in Operational Risk Management, Business Continuity Management, and/or related disciplines (e.G., ORM, CBCP, MBCI). Familiarity with regulatory frameworks applicable to financial market infrastructures (e.G., CPMI-IOSCO Principles for FMIs / PFMI, NI 24-102,

📌 Senior Risk Specialist, Erm (Operational Resilience) (Toronto)
🏢 TMX Group
📍 Toronto