Senior Analyst, ORM & Third-Party Risk

Canadian Tire Bank; Oakville; On-site; CAD 64,000 - 106,000; Full time

Job summary

Canadian Tire Bank is seeking a Senior Analyst, ORM & Third-Party Risk to support the TPRM program and broader operational risk objectives. You will assess, monitor, and report risks from third-party relationships, coordinating with procurement, legal, technology, cybersecurity, and risk stakeholders to ensure governance and compliance.

You will prepare risk dashboards, support regulatory reviews, and contribute to resilience and issue management initiatives across the third-party lifecycle.

Qualifications

• Bachelor's degree in Business, Risk Management, or related field.
• 3–5 years of experience in Third-Party Risk Management, Operational Risk or related disciplines.
• Strong understanding of third-party risk lifecycle and control environments.
• Experience conducting risk assessments and reporting.
• Excellent written and verbal communication, and stakeholder influence.
• Advanced proficiency in Excel and reporting tools.

Responsibilities

• Support the execution and continuous improvement of the Third-Party Risk Management framework, policies, standards, and procedures.
• Coordinate third-party risk assessments across multiple risk domains (operational, cyber, information security, privacy, compliance, financial, resiliency).
• Review inherent and residual risks and recommend mitigation strategies.
• Monitor risk profiles and remediation activities to ensure identified risks are managed.
• Prepare third-party risk reporting, metrics, dashboards, and committee materials.
• Support regulatory examinations, audits, and reviews related to third‑party risk management.

Skills

Third-Party Risk Management

Operational Risk Management

Risk Assessments

Stakeholder Engagement

Regulatory Awareness

Education

Bachelor's degree in Business, Risk Management, or related field

Tools

GRC platforms

Vendor risk tools

Job description

The Senior Analyst, ORM & Third-Party Risk will report to Manager, Third-Party Risk and primarily support the organization's Third-Party Risk Management program while also contributing to broader Operational Risk Management objectives as needed. This role is responsible for assessing, monitoring, and reporting risks arising from third-party relationships, ensuring suppliers and service providers operate in accordance with the organization's risk appetite, regulatory requirements, and governance standards. Working closely with business owners, procurement, legal, technology, cybersecurity, compliance, and risk stakeholders, the Senior Analyst provides effective challenge and oversight throughout the third-party lifecycle while supporting operational risk assessments, issue management, resilience considerations, and risk reporting activities.

Key Responsibilities

Third-Party Risk Management

• Support the execution and continuous improvement of the Third-Party Risk Management framework, policies, standards, and procedures.
• Co-ordinate third-party risk assessments across various risk domains, including operational, cyber, information security, privacy, compliance, financial, and resiliency risk.
• Review inherent and residual risks associated with third-party relationships and recommend appropriate mitigation strategies.
• Monitor third-party risk profiles and track remediation activities to ensure identified risks are effectively managed.
• Support ongoing monitoring activities and periodic reassessments of critical and high-risk third parties.
• Partner with procurement, legal, and business stakeholders throughout the onboarding, renewal, and termination processes.
• Prepare third-party risk reporting, metrics, dashboards, and committee materials for management and governance forums.
• Support regulatory examinations, audits, and reviews related to third-party risk management activities.

Operational Risk Management

• Support Operational Risk Management activities, including risk and control assessments, issue management, and risk reporting.
• Assist in identifying, assessing, and monitoring operational risks associated with critical business processes and third-party dependencies.
• Collaborate with Operational Resilience, Business Continuity, Cybersecurity, and Enterprise Risk teams to assess risks associated with critical service providers.
• Participate in the evaluation of concentration risk, fourth-party dependencies, and supply chain resiliency considerations.

Qualifications

• Bachelor's degree in Business, Risk Management, Supply Chain Management, or a related field.
• 3-5 years of experience in Third-Party Risk Management, Operational Risk Management, Enterprise Risk, Compliance, Audit, Procurement Risk, or a related discipline.
• Strong understanding of third-party risk management principles and lifecycle activities.
• Experience conducting risk assessments and analyzing control environments.
• Strong analytical, critical thinking, and problem-solving capabilities.
• Excellent written and verbal communication skills.
• Ability to effectively challenge stakeholders and influence risk-informed decision-making.
• Advanced proficiency in Microsoft Excel, PowerPoint, and reporting tools.

Preferred

• Experience within financial services, insurance, healthcare, or other regulated industries.
• Familiarity with operational resilience, business continuity, vendor management, or cybersecurity risk management practices.
• Experience with Governance, Risk, and Compliance (GRC) platforms and third‑party risk management tools.
• Working knowledge of industry frameworks and standards related to risk management and third‑party oversight.
• Professional certifications such as CRISC, CISA, CISSP, CBCP, MBCI, CTPRP, or equivalent are considered an asset.

Success Measures

• Effective execution of third‑party due diligence, risk assessments, and ongoing monitoring activities.
• Timely identification, escalation, and management of third‑party risks and control concerns.
• High‑quality risk reporting and governance support for leadership and risk committees.
• Strong stakeholder engagement across business, procurement, legal, technology, and risk functions.
• Contribution to a mature and effective risk management program through continuous improvement initiatives and proactive risk oversight.

Broadband Salary Range

Broadband Salary Range: $64,000 – 106,000 Ourtypical hiring range is between $80,000 and $85,000. Salary decisions are also dependent on other factors such as your experience, industry benchmarks, internal equity and other role‑specific requirements. For critical roles, the compensation offering will be reviewed to ensure alignment with market rate and conditions and the unique value you bring to the role.

About Us

At Canadian Tire Services Limited/Canadian Tire Bank, it is our mandate to continue to create innovative and rewarding financial solutions for our customers.

Our growing suite of products and services showcase the dynamic contributions from our employees and our success is driven by a strong vision, loyal customers, and our ability to build teams that reflect the diverse customers and communities in which we live and work. Join us, where there's a place for you here.

Our Commitment to Diversity, Inclusion and Belonging

We are committed to fostering an environment where belonging thrives, and diversity, inclusion and equity are infused into everything we do. We believe in building an organizational culture where people are consistently treated with dignity while respecting individual religion, nationality, gender, race, age, perceived ability, spoken language, sexual orientation, and identification. We are united in our purpose of being here to help make life in Canada better.

Accommodations

We stand firm in our Core Value that inclusion is a must. We welcome and encourage candidates from equity-seeking groups such as people who identify as racialized, Indigenous, 2SLGBTQIA+, women, people with disabilities, and beyond. Should you require any accommodation in applying for this role, or throughout the interview process, please make them known when contacted and we will work with you to help meet your needs.

We are one of Canada’s most admired and trusted companies. With world-class owned brands and exciting market-leading merchandising strategies, we are continually innovating with purpose: to excite and serve Canadian customers from coast-to-coast. We are connected to communities, big and small, from coast-to-coast, offering products and services that reflect the diverse nature of every one of them. From sports to outdoors, automobiles to homes, we know and understand life in Canada like no other retailer. We are always on the lookout for curious, creative people who are able to navigate and excel in a rapidly evolving retail environment. If you’re ready to take on new challenges – be it in digital, IT, marketing, data & analytics, merchandising, or one of the many other roles we have – there is a place for you here.