Manager, Third Party Risk Assessment

Permanent Full Time 

-

We are looking for a Manager, Third Party Risk Assessment.

Are you a leader experienced in leading the assessments of suppliers’ information security, privacy, business continuity, and Artificial Intelligence (AI) practices, and facilitating process improvement in a global financial services organization?

Reporting to the Director, Global Information Security and Technology Risk, the Manager, Third Party Risk Assessment will manage supplier risk assessments and lead collaboration with procurement, the supplier risk management team, information security, and more.

What you will do

• Lead, mentor, and train a global team of experienced third-party risk assessment (TPRA) assessors.
• Review supplier responses to due diligence questionnaires including artefacts to assess their information security, privacy, business continuity, AI, credit card practices, and more, highlighting concerns to stakeholders.
• Maintain and incrementally improve supplier risk assessment methodologies, processes and procedures.
• Manage the operational excellence of the TPRA team, facilitating methodical and incremental process improvements, creating and updating internal processes and procedural artefacts, ensuring quality and consistency of supplier assessments, and proactively escalating any problems to leadership.
• Represent the TPRA team when collaborating with procurement, supplier risk management, other risk teams (technology risk, privacy, business continuity, AI, and more) across First line, Second line and Third Lines of defence. Provide feedback for new or revised policies and standards proposed by Procurement and Supplier Risk Management.
• Support stakeholders (Procurement, Supplier Risk Management, information security and technology risk management teams and more) respond to queries (e.g. OSFI B-10) from external regulators, prepare for external audit reviews and internal reporting cycles.
• Facilitate and lead training workshops for internal assessors.
• Track and manage supplier assessments in a fit-for-purpose supplier assessment SaaS tool and review the suitability of proposed competitor solutions.

What you will bring

• 7-10 years’ experience assessing suppliers’ information security, privacy and business continuity practices including their SOC 2 reports, ISO 27001 certifications, attestations and artefacts.
• In-depth experience using supplier assessment questionnaires from industry (e.g. SIG) including custom internal questionnaires, and insights into the pros & cons of different approaches.
• A process mindset that seeks to understand the big picture (upstream process, downstream impacts, etc.) with a detail-oriented eye for quality.
• Experience leading a team of operational assessors and/or cross-functional teams.
• Experience developing and maintaining training artefacts in SharePoint or Confluence.
• Familiarity with SaaS solutions specialized for supplier risk assessments
• Experience assessing potential subsidiaries in advance of mergers & acquisitions from a third-party risk assessment perspective.
• Nice to have - certifications or designations related to risk management and/or information security. E.g. CISA, CRISC, CISM, CISSP, etc.

-

The base salary for this position is between  $119,300 - $169,300 annually.  This represents base salary only and does not represent other variable compensation components of our total compensation ( i.e. annual bonus, commission etc).  If you are selected to move forward in our recruitment process, your recruiter will be able to discuss additional details of our total rewards program with you.

Career opportunities will be open a minimum of 5 business days from the date of posting, closing dates will vary depending on the search activity. All applications received will be reviewed on a rolling basis.

Be your best at Canada Life- Apply today!

Being a part of Canada Life means you have a voice. This is a place where your unique background, perspectives and talents are valued, and shape our future success.

You can be your best here. You’re part of a diverse and inclusive workplace where your career and well-being are championed. You’ll have the opportunity to excel in your way, finding new and better ways to deliver exceptional customer and advisor experiences.

Together, as part of a great team, you’ll deliver on our shared purpose to improve the well-being of Canadians. It’s our driving force. Become part of a strong and successful company that’s trusted by millions of Canadians to do the right thing.

Canada Life serves the financial security needs of more than 13 million people across Canada, with additional operations in Europe and the United States. As members of the Power Financial Corporation group of companies, we’re one of Canada’s leading insurers with interests in life insurance, health insurance, investment and retirement savings. We offer a broad portfolio of financial and benefit plan solutions for individuals, families, businesses and organizations. 

We are committed to providing an inclusive, accessible environment, where all employees and customers feel valued, respected and supported. We are dedicated to building a workforce that reflects the diversity of the communities in which we live, and to creating an environment where every employee has the opportunity to reach their potential. 

It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Canada Life policies. To request a reasonable accommodation in the application process, contact talentacquisitioncanada@canadalife.com.

Canada Life would like to thank all applicants, however only those who qualify for an interview will be contacted.

#LI-Hybrid