Director, Third Party Risk Management in Toronto

We are seeking a highly experienced and strategic leader to join our Third Party Risk Management (TPRM) function as a Director, Line 1B. This role is accountable for leading the Quality Assurance and governance oversight function across Vendor Information Security Management (VISM), Vendor Governance Management (VGM), and Sourcing. The Director will lead and manage a team, providing clear direction, oversight, and ongoing development, while ensuring procurement-related third-party risk activities are executed in line with internal policies, audit expectations, and regulatory requirements.

The successful candidate will bring deep expertise in audit, regulatory compliance, and Risk & Control Self-Assessment (RCSA) and will serve as a key point of contact for regulators (e.g., OSFI), Internal Audit, and Second Line Risk. This role requires a strong, confident leader with a strategic and critical mindset, capable of influencing stakeholders, challenging constructively, and delivering consistent, high-quality outcomes.

Position Responsibilities:

• Quality Assurance & Control Oversight
  • Lead and execute a comprehensive Quality Assurance Program across VISM, VGM, and Sourcing teams.
  • Ensure all activities are completed in accordance with defined TPRM processes, system requirements, and documentation standards.
  • Identify, challenge, and elevate non-compliance, including contracts executed prior to completion of required risk assessments.
  • Perform effective challenge on risk assessments, including PSQ outputs that did not trigger IRQ where further review is warranted.
• RCSA Ownership & Risk Governance
  • Own and lead all Procurement-related RCSAs, including design, execution, and ongoing monitoring.
  • Ensure risks and controls are clearly defined, consistently applied, and aligned to enterprise and regulatory expectations.
  • Provide clear, defensible articulation of risk positions using audit and regulatory language.
  • Oversee governance of Key Risk Indicators (KRIs), centralized issues management and remediation tracking, and risk data accuracy and reporting integrity.
• Regulatory, Audit & Compliance Engagement
  • Act as a primary point of contact for regulators (including OSFI), Internal Audit, and Line 2 Risk.
  • Lead responses to regulatory reviews and examinations, internal audit inquiries and testing, and supplier due diligence and external questionnaires.
  • Ensure all outputs are accurate, consistent, evidence-based, and defensible.
• Policy, Guidelines & Advisory
  • Develop and maintain TPRM guidelines, processes, and playbooks aligned to regulatory expectations.
  • Provide guidance to business units on handling supplier confidential documentation requests and application of TPRM requirements in complex or non-standard scenarios (e.g., exceptions, travel-related vendors).
• Leadership & Strategic Direction
  • Lead, manage, and develop a high-performing team, providing clear direction, priorities, and performance expectations.
  • Set and execute a strategic vision for Quality Assurance and TPRM governance.
  • Foster a culture of accountability, integrity, and continuous improvement.
  • Apply a critical and independent mindset to challenge processes, identify gaps, and strengthen the control environment.
  • Build team capability through training, coaching, and ongoing development.
  • Partner with senior stakeholders across Procurement, Risk, and Business Units to influence outcomes and strengthen risk management practices.

Required Qualifications:

• 10+ years of experience in Third Party Risk Management (TPRM), Operational Risk, Audit, or Compliance.
• Deep expertise in audit practices and regulatory expectations, RCSA frameworks, control design, and risk assessment methodologies.
• Strong experience engaging with regulators (e.g., OSFI) and internal and external audit functions.
• Proven ability to communicate complex risk positions using audit-grade, regulator-ready language.
• Demonstrated experience leading and managing teams and delivering high-quality outcomes.

Preferred Qualifications:

• Strong leadership and people management capability.
• Strategic thinking with a forward-looking risk mindset.
• Critical thinking and effective challenge capability.
• Executive presence and strong stakeholder influence.
• Fluency in audit and regulatory language with the ability to produce defensible outputs.
• High degree of integrity, accountability, and sound judgment.

When you join our team, we’ll empower you to learn and grow the career you want. We’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words. As part of our global team, we’ll support you in shaping the future you want to see.