Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Third-Party Risk Management Analyst (TPRM) – Vendor Risk & Due Diligence role.

Rezi rewrites your resume against Recrute Action's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Third-Party Risk Management Analyst (TPRM) – Vendor Risk & Due Diligence posting at Recrute Action — free, in seconds.

About the Role

Contribute to third-party risk management across the vendor lifecycle in the insurance sector. Utilize risk assessment and analytical skills to support due diligence, ongoing monitoring, governance, and continuous improvement in a regulated environment.

Responsibilities

Conduct and provide effective challenge of Inherent Risk Questionnaires.
Challenge responses where information appears incomplete, inconsistent, or does not appropriately reflect risk considerations.
Ensure the Inherent Risk Questionnaire appropriately identifies the supplier’s inherent risk.
Escalate material gaps, inconsistencies, or unresolved concerns before the inherent risk assessment is finalized.
Perform financial due diligence, including reviews of supplier financial health, financial risk indicators, and credit information.
Conduct adverse and negative media reviews to identify potential reputational, legal, regulatory, or operational concerns.
Assess supplier risk information and identify areas requiring additional due diligence, escalation, or risk mitigation.
Review relevant third-party risk documentation and supporting evidence.
Provide guidance to Contract Owners and business stakeholders on third-party risk management requirements.
Conduct risk-based ongoing monitoring of third parties.
Monitor supplier risk indicators, including financial health and performance, adverse and negative media, emerging global risks, and material changes.
Assess changes in supplier risk and determine whether additional review, escalation, or risk mitigation is required.
Support periodic supplier reviews and maintain clear documentation of the supplier’s current risk posture.
Track risk findings, issues, remediation actions, and policy exceptions through resolution.
Identify and escalate material changes in supplier risk.
Support a consistent, risk-based approach to third-party oversight.
Support adherence to internal Third-Party Risk Management policies, standards, procedures, and governance requirements.
Support compliance with applicable third-party risk regulatory requirements, including OSFI Guideline B-10.
Assist with internal audit, external audit, regulatory reviews, and other assurance activities.
Maintain accurate, complete, and appropriately documented risk assessments and audit trails.
Support the tracking and remediation of identified control gaps, risk findings, and regulatory or audit issues.
Partner with business units, Procurement, Contract Owners, and Risk and Control functions.
Clearly communicate risk assessment results, identified concerns, and required actions to relevant stakeholders.
Provide constructive and effective challenge where risk information, assessments, or supporting evidence are incomplete or inconsistent.
Provide training and guidance to Contract Owners and other stakeholders on third-party risk requirements and processes.
Support Contract Owners in understanding and fulfilling their accountability for third-party risk.
Contribute to enhancements to third-party risk management processes, controls, tools, and frameworks.
Support the preparation of risk reporting, dashboards, metrics, and governance materials.
Identify opportunities to improve data quality, risk assessment effectiveness, process efficiency, and risk oversight.
Support improvements to inherent risk assessment and ongoing monitoring processes.
Stay informed of emerging third-party risks, regulatory developments, industry practices, and technology-related risks.

Requirements

2-5 years of relevant experience in Third-Party Risk Management or Vendor Risk Management, compliance, internal or external audit, or technology or information risk.
Experience conducting or supporting inherent risk assessments and effective challenge of risk questionnaires, third-party due diligence, financial risk reviews, adverse or negative media reviews, ongoing supplier monitoring, and issue and remediation tracking.
Strong understanding of the third-party lifecycle, including onboarding, risk assessment, due diligence, ongoing monitoring, governance, and offboarding.
Understanding of risk-based assessment and monitoring methodologies.
Demonstrated ability to critically evaluate information, identify inconsistencies or gaps, and appropriately challenge risk assessments and supporting information.
Strong risk assessment and analytical skills.
Effective challenge and critical-thinking capabilities.
Understanding of risk, controls, compliance, and audit principles.
Ability to analyze information from multiple sources and develop a clear risk view.
Training and facilitation skills.
Familiarity with third-party risk regulatory expectations, including OSFI Guideline B-10 or comparable regulatory requirements, is an asset.
Experience reviewing SOC reports, ISO certifications, audit reports, or similar risk and control documentation is preferred.
Experience with third-party risk or vendor management platforms such as Archer, Ivalua, or ProcessUnity.
Understanding of cybersecurity, information security, privacy, business continuity, and technology risk concepts.
Exposure to emerging third-party technology risks, including artificial intelligence, cloud services, and concentration risk.
Experience working within a financial institution or other regulated environment.
Sound judgment and the ability to identify and escalate material risk concerns.
Strong attention to detail and documentation discipline.
Strong stakeholder management and communication skills.
Ability to manage multiple assessments and priorities.

Skills

Third-Party Risk Management
Vendor Risk Management
Risk Assessment
Due Diligence
Ongoing Monitoring
Governance
Continuous Improvement
Financial Risk Reviews
Adverse Media Reviews
Negative Media Reviews
Issue Tracking
Remediation Tracking
Analytical Skills
Critical Thinking
Stakeholder Management
Communication Skills
Attention to Detail
Documentation Discipline
Risk Reporting
Process Improvement
Regulatory Compliance
Cybersecurity
Information Security
Privacy
Business Continuity
Technology Risk

Work Type

Full-time
Contract

Experience Level

2-5 years

Salary/Compensations

$42-47 per hour
$50-55 per hour (Incorporated Business Rate)

About the Company

Recruit Action (agency permit: AP-2504511) provides recruitment services through quality support and a personalized approach.
As part of the screening process, some applications may be reviewed using artificial intelligence tools.
Only candidates who meet the hiring criteria will be contacted.