One of Client is looking to add a Third Party Risk & Governance Analyst to their team.

This person will sit within the Procurement/Vendor Management department and will help do Third-Party risk assessments and govern vendors. This is not a role specific to Technology - they will engage with all types of vendors.

Its a hybrid role 2 days a week in office (Tuesday, Wednesday), downtown Toronto. Its a 6 months contract to start with a potential to extend or convert into a full time role.

Responsibilities:

- Lead and coordinate TPRM assessments for vendor onboarding, renewals, ongoing monitoring, and offboarding
- Partner with Business Owners, Privacy, Security, Legal, Compliance, Procurement, and vendors to identify, assess, and mitigate third-party risks
- Manage vendor criticality assessments, due diligence reviews, risk remediation plans, and risk exceptions
- Monitor supplier performance through scorecards, metrics, and Quarterly Business Reviews (QBRs) for strategic suppliers
- Track and manage incidents, issues, corrective action plans, concentration risk, and ongoing risk mitigation activities
- Develop and maintain Exit Plans and Business Continuity Plans based on vendor criticality and risk tier




- Maintain the TPRM Inventory and ensure vendor risk records, due diligence documentation, and governance activities remain current
- Support audits, regulatory requirements, and adherence to TPRM Policy

Mandatory Skills:

- 3-5 years of experience in Third-Party Risk Management, Vendor Risk Management, Governance, Compliance, Procurement, or Operational Risk
- Experience managing vendor due diligence, risk assessments, ongoing monitoring, and remediation activities
- Robust stakeholder management skills and the ability to collaborate across business, risk, and vendor teams
- Strong analytical, organizational, and communication skills
- Experience supporting technology, SaaS, cloud, or managed service providers is an asset

Nice to Have:

- Experience supporting financial services, insurance, healthcare, or other regulated environments.
- Understanding of OSFI B-10, third-party risk management principles, operational resilience, or enterprise risk management frameworks.
- Experience facilitating QBRs, vendor scorecards, and performance monitoring programs.
- Exposure to SaaS, cloud, managed services, and technology supplier ecosystems.

📌 Third Party Risk & Governance Analyst (Toronto)
🏢 OnX
📍 Toronto