Third-Party Risk & Governance Analyst (Intermediate)

Resonaite; Toronto; On-site; CAD 70,000 - 110,000; Full time

Job summary

Resonaite is seeking a Third-Party Risk & Governance Specialist with 3–5 years of experience in TPRM, vendor governance, and supplier risk assessments. The role supports a full lifecycle of third-party engagements across onboarding, monitoring, renewals and offboarding, collaborating with Security, Privacy, Legal, Compliance and Procurement to mitigate risks.

The ideal candidate will manage due diligence, criticality assessments, and remediation plans, while tracking performance via scorecards

Qualifications

• 3–5 years of hands-on experience in Third-Party Risk Management (TPRM), vendor governance, and supplier risk assessments.

Responsibilities

• Lead and coordinate third-party risk assessments across vendor onboarding, renewals, ongoing monitoring, and off-boarding.
• Conduct and manage vendor criticality assessments, due diligence reviews, risk assessments, remediation plans, and risk exceptions.
• Partner with Business Owners, Cybersecurity, Privacy, Legal, Compliance, Procurement, Finance, and vendors to identify and address third-party risks.
• Monitor vendor performance and risk through scorecards, key metrics, ongoing assessments, and QBRs.
• Track vendor incidents, identified risks, issues, corrective action plans, concentration risks, and remediation activities through resolution.
• Develop and maintain vendor Exit Plans and Business Continuity Plans based on criticality and risk tier.
• Maintain the TPRM inventory and ensure vendor records, assessments, due diligence documentation, and governance activities remain accurate and current.
• Support third-party risk audits, regulatory reviews, governance reporting, and compliance with organizational TPRM policies.
• Identify opportunities to strengthen vendor governance, risk monitoring, controls, and overall TPRM processes.

Skills

TPRM

Vendor governance

Due diligence

QBRs

Regulatory knowledge

Stakeholder management

Risk remediation

Job description

Resonaite is seeking a Third-Party Risk & Governance Specialist with 3–5 years of experience in TPRM, vendor governance, and supplier risk assessments. The role supports a full lifecycle of third-party engagements across onboarding, monitoring, renewals and offboarding, collaborating with Security, Privacy, Legal, Compliance and Procurement to mitigate risks.

The ideal candidate will manage due diligence, criticality assessments, and remediation plans, while tracking performance via scorecards