{bc}
indeed

Senior Analyst, ORM & Third-Party Risk

Canadian Tire Corporation, Ltd.
Oakville, CAN
Full-time
Senior
Onsite
$64,000–$106,000
Discovered 3 weeks ago
Third-Party Risk ManagementOperational Risk ManagementRisk assessmentsControl environment analysisRisk reporting and dashboardsMicrosoft Excel

Full Job Posting

Role overview

Supports the organization's Third-Party Risk Management program and broader Operational Risk Management objectives.

Assesses, monitors, and reports risks from third-party relationships against risk appetite, regulatory requirements, and governance standards.

Works with business owners, procurement, legal, technology, cybersecurity, compliance, and risk stakeholders.

Third-Party Risk Management

  • Support execution and continuous improvement of the third-party risk framework, policies, standards, and procedures.
  • Coordinate risk assessments across operational, cyber, information security, privacy, compliance, financial, and resiliency domains.
  • Review inherent and residual risks and recommend mitigations; monitor risk profiles and remediation.
  • Support ongoing monitoring and periodic reassessments of critical and high-risk third parties.
  • Partner with stakeholders throughout onboarding, renewal, and termination.
  • Prepare reports, metrics, dashboards, and committee materials; support regulatory examinations, audits, and reviews.

Operational Risk Management

  • Support risk and control assessments, issue management, and risk reporting.
  • Assess operational risks in critical business processes and third-party dependencies.
  • Collaborate with Operational Resilience, Business Continuity, Cybersecurity, and Enterprise Risk teams.
  • Evaluate concentration risk, fourth-party dependencies, and supply-chain resilience.

Required qualifications

  • Bachelor's degree in Business, Risk Management, Supply Chain Management, or a related field.
  • 3–5 years of experience in third-party risk, operational risk, enterprise risk, compliance, audit, procurement risk, or a related discipline.
  • Strong understanding of third-party risk principles and lifecycle activities; experience conducting risk assessments and analyzing controls.
  • Strong analytical, critical-thinking, problem-solving, written, and verbal communication skills.
  • Ability to challenge stakeholders and influence risk-informed decisions.
  • Advanced proficiency in Microsoft Excel, PowerPoint, and reporting tools.

Preferred qualifications

  • Experience in financial services, insurance, healthcare, or another regulated industry.
  • Familiarity with operational resilience, business continuity, vendor management, or cybersecurity risk practices.
  • Experience with GRC platforms and third-party risk management tools; working knowledge of relevant frameworks and standards.
  • CRISC, CISA, CISSP, CBCP, MBCI, CTPRP, or equivalent certification is an asset.

Success measures

Effective due diligence, risk assessments, and ongoing monitoring.

Timely identification, escalation, and management of third-party risks and control concerns.

High-quality reporting and governance support, strong stakeholder engagement, and contribution to continuous program improvement.

Salary

  • Broadband salary range is $64,000–$106,000; typical hiring range is $80,000–$85,000.
  • Salary decisions depend on experience, industry benchmarks, internal equity, and role-specific factors.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Canadian Tire Corporation, Ltd.