Business Analyst (Third-Party Risk) – ContractLocation: Toronto, ON (Hybrid – Tues–Thurs onsite)Duration: 6 Months (Extension & Conversion Possible)Start Date: June 23–26, 2026Hours: Monday–Friday, Core Business HoursPay Rate: Up to $46/hour + 4% vacation payOpen Positions: 2About the RoleWe are seeking a Business Analyst (Third-Party Risk Analyst) to support a growing Third-Party Risk Management (TPRM) program. In this role, you will assess, monitor, and manage third-party risks across the vendor lifecycle, ensuring compliance with internal policies and regulatory expectations. You will work closely with stakeholders across business, procurement, and risk teams to strengthen vendor oversight and governance practices.Key ResponsibilitiesConduct inherent risk assessments based on service criticality, data sensitivity, and regulatory impactPerform financial reviews of vendors, including analysis of financial health and credit ratingsComplete adverse media screening to identify reputational or legal risksEvaluate overall supplier risk and recommend mitigation actionsProvide training and guidance to stakeholders on third‑party risk practicesMonitor third parties to ensure ongoing compliance with risk and control requirementsSupport governance activities, including periodic supplier reviewsTrack risk issues, findings, and exceptions, ensuring timely resolutionMonitor risk indicators such as financial performance, adverse media, and emerging risksMaintain a consistent risk‑based approach to vendor managementEnsure adherence to internal TPRM policies and standardsSupport regulatory compliance (e.G.,



OSFI B‑10 or similar frameworks)Assist with internal/external audits and remediation effortsMaintain accurate documentation and audit trailsCollaborate with business units, procurement, and risk teamsCommunicate risk findings and recommendations clearlySupport contract owners in managing vendor performance and riskContribute to TPRM program enhancements, tools, and frameworksSupport risk reporting, dashboards, and metrics developmentStay informed on emerging risks and regulatory changesMust‑Have Qualifications2–5 years of experience in Third‑Party Risk Management / Vendor Risk, Compliance, Audit, or Operational RiskHands‑on experience with inherent risk assessments, vendor due diligence, and risk evaluationsStrong understanding of vendor lifecycle (onboarding, monitoring, governance)Experience with financial analysis of vendors and adverse media screeningExcellent analytical, problem‑solving, and communication skillsNice‑to‑Have SkillsFamiliarity with OSFI B‑10 or similar regulatory frameworksExperience reviewing SOC reports, ISO certifications, or control documentationExperience with TPRM tools (e.G., Archer, Ivalua, ProcessUnity)Understanding of cybersecurity and information riskExposure to emerging risks (e.G., AI, cloud, global risk landscape)Candidate Profile3–4 years of overall experience, degree in any relevant field, robust attention to detail with a risk‑focused mindset, and ability to work in a cooperative, fast‑paced team (8–10 members).Interview ProcessVirtual interviewIn‑person interview#J-18808-Ljbffr

📌 Business Analyst Vendor Risk Management (Toronto) - $46 An Hour (Winnipeg)
🏢 Kelly Services (Canada
📍 Winnipeg