Senior Analyst, Enterprise Risk Management - Change Management

TMX Group; Montreal (administrative region); Hybrid; CAD 85,000 - 90,000; Full time

Benefits offered by this job

Hybrid work model

Wellness program

Accommodations for applicants

Job summary

TMX Group is seeking a Senior Analyst, Enterprise Risk Management - Change Management, to support ERM and Operational Resilience programs across CDS and CDCC in Canada. Hybrid work arrangement (2-3 days in office) with offices in Toronto or Montreal.

You will identify, assess, monitor, and report non-financial risks, collaborate with business lines and leadership, and contribute to risk taxonomy, appetite, top-risk reviews, and training across TMX Post-Trade.

Qualifications

• Bachelor’s degree in Finance, Business Administration, or related field (Master's degree preferred).
• Minimum of 3 years of risk management, audit, or compliance experience in financial services or consulting.
• Experience delivering ERM/ORM projects including Operational Resilience, Risk Appetite, Third-Party Risk Management, and Internal Controls.

Responsibilities

• Change Management Risk Evaluation: identify and oversee risk profile for significant changes and projects.
• Maintain risk taxonomy across CDS and CDCC.
• Assist with Risk Appetite Statement reviews, metrics, and tolerance monitoring.
• Identify and monitor top enterprise risks with senior leadership.
• Facilitate incident reporting, root cause analyses, and corrective actions.
• Prepare quarterly ERM reporting for SLT, RMC, and Board.
• Support enterprise-wide risk training programs.

Skills

ERM/ORM delivery

Stakeholder management

Communication skills

Risk taxonomy & appetite

Financial services domain knowledge

Education

Bachelor's degree in Finance/Business or related field

Master's degree preferred

Job description

Venture outside the ordinary - TMX Careers

The TMX group of companies includes leading global exchanges such as the Toronto Stock Exchange, Montreal Exchange, and numerous innovative organizations enhancing capital markets. United as a global team, we’re connecting cross-functionally, traversing industries and geographies, moving opportunity into action, advancing global economic growth, and propelling progress. Through a rich exchange of ideas, meaningful collaboration, and a nimble operating model, we're powering some of the nation's most critical systems, fueling capital formation and innovation, bringing increased opportunity to business visionaries, product ingenuity to consumers, and career exploration to our team.

Ready to be part of the action?

Join a pivotal second-line position at the heart of Canada's financial market infrastructure. As a Senior Analyst, Enterprise Risk Management - Change Management, you will support the delivery of the Enterprise Risk Management (ERM) and Operational Resilience programs across the Canadian Depository for Securities (CDS)—Canada's central securities depository, clearing, and settlement hub—and the Canadian Derivatives Clearing Corporation (CDCC)—the national central counterparty for exchange-traded and over-the-counter derivatives—collectively known as “TMX Post-Trade.”

You will play a key role in identifying, assessing, monitoring, and reporting on significant non-financial risks, working closely with business lines, process owners, and the Senior Leadership Team. This role primarily focuses on the Enterprise Risk Management program — spanning change-management risk evaluation, risk taxonomy, risk appetite, top-risk identification, quarterly reporting, and enterprise-wide training — and provides independent second-line oversight of the non-financial risks and controls owned by the first line of defence.

This role reports to:

Manager, Enterprise Risk Management & Non-Financial Resilience

Job Location:

Hybrid (2-3 days in office) - we are open to candidates being located in one of our Canadian office locations: Toronto or Montreal.

Key Accountabilities

Enterprise Risk Management & Governance

• Change Management Risk Evaluation (CMRE): support the identification, assessment, and oversight of the risk profile associated with significant changes and projects; monitor first-line adherence to change management procedures; and facilitate post-implementation reviews to capture lessons learned.
• Risk Taxonomy: support the maintenance and continued evolution of the Post-Trade risk taxonomy, ensuring consistent and comprehensive classification of non-financial risks across CDS and CDCC.
• Risk Appetite Statement: support the periodic review and refresh of the Risk Appetite Statement, including the calibration of appetite metrics and tolerance thresholds, and the monitoring and escalation of breaches.
• Top Risk Identification: contribute to the identification, assessment, and monitoring of top and emerging enterprise risks, supporting periodic top-risk reviews with business lines and the Senior Leadership Team.
• Incident Reporting: Facilitate the end-to-end incident reporting process, ensuring risk events are accurately documented and escalated promptly. Support root cause analyses and partner with business units to track the implementation of corrective action plans.
• Quarterly ERM Reporting: prepare quarterly ERM reporting and materials for the Senior Leadership Team, Risk Management Committee (RMC), and Board, aggregating and analyzing risk data into clear insights, trends, and recommendations.
• Enterprise-wide Training Program: support the development and delivery of the enterprise-wide risk training program to embed risk awareness and strengthen risk culture across the first line.

Collaborative Opportunities Across ERM Programs

Role

While the primary focus is on Enterprise Risk Management, including Change Management and Operational Resilience, there may be opportunities to contribute in a supportive role to initiatives within:

• Operational Risk Management (ORM): Support risk assessment and oversight for operational activities. Monitor key risk indicators and analyze operational risk data to identify trends and inform strategic decisions. Contributing to the quarterly RCSA, periodic process-based RCSA (pRCSA), and the monitoring of Key Risk Indicators (KRIs) across TMX Post-Trade.
• Third Party Risk Management (TPRM): Support the ongoing execution and maturity of the TPRM program by conducting thorough third-party risk assessments across new business initiatives and BAU, and facilitate continuous program oversight by analyzing risk data to prepare and present comprehensive quarterly reports to senior management.
• Cyber Risk Management: Collaborate with the TMX Information Security Office and key stakeholders to maintain a comprehensive view of cyber risks impacting Post-Trade by tracking emerging threats, monitoring incidents, and embedding cybersecurity considerations into broader non-financial risk programs like TPRM.

Must Haves

• Education: Bachelor’s degree in Finance, Business Administration, or a related field (Master's degree preferred).
• Experience: Minimum of 3 years of relevant experience in risk management, audit, or compliance functions within financial services or consulting firms.
• Core Risk Expertise: Experience delivering ERM/ORM projects, including Operational Resilience, Risk Appetite, Third-Party Risk Management, Internal Controls, Business Continuity Management, Crisis Management, Cybersecurity, and related operational resilience concepts.
• Domain Knowledge: Solid understanding of financial institutions, market infrastructures, and financial markets.
• Communication Skills: Exceptional written and verbal communication skills, with the ability to articulate complex risk concepts clearly and concisely to diverse audiences.
• Stakeholder Management: Proven ability to work independently with multiple stakeholders across different business units, manage competing priorities effectively, and drive deliverables to completion with minimal supervision.
• Accountability: A proactive and results-oriented approach, demonstrating ownership and accountability for assigned responsibilities.

Nice To Haves

• Certifications: Professional designations in Operational Risk Management, Business Continuity Management, Third-Party Risk Management, and/or Cyber Risk Management (e.g., ORM, CBCP, MBCI).
• Regulatory Familiarity: Knowledge of regulatory frameworks (e.g., CPMI-IOSCO Principles for FMIs, OSFI B-10, etc.).
• Language Skills: Fluency in both French and English (written and spoken) is an asset to support regular interaction with bilingual partners and stakeholders.

Salary Range: 85K/year - 90K/year CAD. Please note that the salary range included is a guideline only. The salary offered may vary based on factors, including, but not limited to, the successful candidate’s relevant knowledge, skills, and experience.

The recruiting efforts for this role are intended to fill a vacant position.

Excitement

Explore emerging technology and innovation, as well as ventures and digital finance that shape the future of global markets! Experience the movement of the market while grounded in the stability of close to 200 years of success.

Connection

With site hubs in some of the world’s most multicultural cities, we leverage our size and structure to create rich connections and belonging while experiencing powerful global impact through our work.

Impact

More than a platform, we use our talents to power mission-critical systems that drive global economic advancement, innovation, and growth. As well, our employee-led Team Impact spreads social good via our giving strategy.

Wellness

From empathetic leadership to a culture of flexibility and balance, we believe wellness at work creates the maximum yield and a stronger 'we'. Plus, with a cloud-first and hybrid workstyle, as well as generous time-off and leaves, we support a life well lived!

Growth

From a growth mindset in our work, to expansion in our business, TMX is home to action-takers energized by the achievement of ambitious growth.

Ready to enrich your career with impactful work, leaders who truly care, and the flexibility and programs to help you thrive as part of #TeamTMX ?

Please note that our company is not currently sponsoring work permit applications and the applicant must be authorized to work in the country where this position is located.

TMX is committed to creating and sustaining a collegial work environment in which all individuals are treated with dignity and respect and one which reflects the diversity of the community in which we operate. We provide accommodations for applicants and employees who require it.