Third Party Risk Senior Analyst

We are seeking a Third Party Risk Senior Analyst to support the organization’s Third-Party Risk Management (TPRM) program. This role is responsible for assessing, challenging, and monitoring third-party risks throughout the vendor lifecycle, ensuring alignment with internal policies, regulatory expectations, and the organization’s risk appetite.

A key responsibility of this role is to provide effective challenge of Inherent Risk Questionnaires (IRQs) to ensure the information provided by Contract Owners and business stakeholders is accurate, complete, internally consistent, and appropriately reflects the nature and risk of the third-party engagement. The resulting inherent risk assessment determines the scope and level of due diligence and ongoing monitoring required for the third party.

The ideal candidate will have experience in third-party risk management, operational risk, compliance, or audit, with practical experience conducting inherent risk assessments, financial and adverse media reviews, ongoing monitoring, and governance activities.

· Conduct and provide effective challenge of Inherent Risk Questionnaires (IRQs) completed by Contract Owners and business stakeholders, assessing whether responses are accurate, complete, internally consistent, and appropriately reflect the nature of the supplier engagement.

· Challenge responses where information appears incomplete, inconsistent, or does not appropriately reflect factors such as service criticality, data sensitivity, technology dependencies, regulatory impact, or other relevant risk considerations.

· Ensure the IRQ appropriately identifies the supplier’s inherent risk, as this assessment determines the scope and level of required due diligence and ongoing monitoring.

· Escalate material gaps, inconsistencies, or unresolved concerns before the inherent risk assessment is finalized.

· Perform financial due diligence, including review of supplier financial health, financial risk indicators, and credit information.

· Conduct adverse/negative media reviews to identify potential reputational, legal, regulatory, or operational concerns.

· Assess supplier risk information and identify areas requiring additional due diligence, escalation, or risk mitigation.

· Review relevant third-party risk documentation and supporting evidence to assess completeness and identify potential risk concerns.

· Provide guidance to Contract Owners and business stakeholders on TPRM requirements and their responsibilities throughout the vendor lifecycle.

· Conduct risk-based ongoing monitoring of third parties in accordance with established policies, standards, and monitoring requirements.

· Monitor supplier risk indicators, including financial health and performance, adverse/negative media, emerging global risks, and material changes to the supplier or services provided.

· Assess changes in supplier risk and determine whether additional review, escalation, or risk mitigation is required.

· Support periodic supplier reviews and maintain clear documentation of the supplier’s current risk posture.

· Track risk findings, issues, remediation actions, and policy exceptions through resolution.

· Identify and escalate material changes in supplier risk in accordance with established governance requirements.

· Support a consistent, risk-based approach to third-party oversight, with appropriate focus on higher-risk and critical suppliers.

· Support Contract Owners in understanding their accountability for ongoing supplier risk management.

· Support adherence to internal Third-Party Risk Management policies, standards, procedures, and governance requirements.

· Support compliance with applicable third-party risk regulatory requirements, including OSFI Guideline B-10, where relevant.

· Assist with internal audit, external audit, regulatory reviews, and other assurance activities, including evidence gathering and remediation tracking.

· Maintain accurate, complete, and appropriately documented risk assessments and audit trails.

· Support the tracking and remediation of identified control gaps, risk findings, and regulatory or audit issues.

· Partner with business units, Procurement, Contract Owners, and Risk and Control functions.

· Clearly communicate risk assessment results, identified concerns, and required actions to relevant stakeholders.

· Provide constructive and effective challenge where risk information, assessments, or supporting evidence are incomplete or inconsistent.

· Provide training and guidance to Contract Owners and other stakeholders on third-party risk requirements and processes.

· Support Contract Owners in understanding and fulfilling their accountability for third-party risk throughout the vendor lifecycle.

· Contribute to enhancements to TPRM processes, controls, tools, and frameworks.

· Support the preparation of risk reporting, dashboards, metrics, and governance materials.

· Identify opportunities to improve data quality, risk assessment effectiveness, process efficiency, and risk oversight.

· Support improvements to inherent risk assessment and ongoing monitoring processes.

· Stay informed of emerging third-party risks, regulatory developments, industry practices, and technology-related risks.

· 2-5 years of relevant experience in one or more of the following:

· Third-Party Risk Management / Vendor Risk Management

· Compliance

· Internal or External Audit

· Technology or Information Risk

· Experience conducting or supporting:

· Inherent risk assessments and effective challenge of risk questionnaires

· Third-party due diligence

· Financial risk reviews

· Adverse/negative media reviews

· Ongoing supplier monitoring

· Issue and remediation tracking

· Strong understanding of the third-party lifecycle, including onboarding, risk assessment, due diligence, ongoing monitoring, governance, and offboarding.

· Understanding of risk-based assessment and monitoring methodologies.

· Demonstrated ability to critically evaluate information, identify inconsistencies or gaps, and appropriately challenge risk assessments and supporting information.

· Familiarity with third-party risk regulatory expectations, including OSFI Guideline B-10 or comparable regulatory requirements, is an asset.

· Experience reviewing SOC reports, ISO certifications, audit reports, or similar risk and control documentation is preferred.

· Strong risk assessment and analytical skills

· Effective challenge and critical-thinking capabilities

· Sound judgment and the ability to identify and escalate material risk concerns

· Strong attention to detail and documentation discipline

· Understanding of risk, controls, compliance, and audit principles

· Strong stakeholder management and communication skills

· Ability to analyze information from multiple sources and develop a clear risk view

· Ability to manage multiple assessments and priorities

· Training and facilitation skills

· Experience with third-party risk or vendor management platforms such as Archer, Ivalua, or ProcessUnity.

· Understanding of cybersecurity, information security, privacy, business continuity, and technology risk concepts.

· Exposure to emerging third-party technology risks, including artificial intelligence, cloud services, and concentration risk.

· Experience working within a financial institution or other regulated environment.

When you join our team:

• We’ll empower you to learn and grow the career you want.
• We’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words.
• As part of our global team, we’ll support you in shaping the future you want to see.

Le poste annoncé correspond à une vacance existante.

À propos de Manuvie et de John Hancock

La Société Financière Manuvie est un chef de file mondial des services financiers qui aide les gens à prendre leurs décisions plus facilement et à vivre mieux. Pour en apprendre plus à notre sujet, rendez vous à l’adresse www.manuvie.com.

Manuvie est un employeur qui souscrit au principe de l’égalité d’accès à l’emploi

Chez Manulife/John Hancock nous valorisons notre diversité. Nous nous efforçons d’attirer, de perfectionner et de maintenir une main d'oeuvre qui est aussi diversifiée que nos clients, et de favoriser la création d’un milieu de travail inclusif qui met à profit la diversité de nos employés et les compétences de chacun. Nous nous engageons à assurer un recrutement, une fidélisation, une promotion et une rémunération équitables, et nous administrons toutes nos pratiques et tous nos programmes sans discrimination en raison de la race, de l’ascendance, du lieu d’origine, de la couleur, de l’origine ethnique, de la citoyenneté, de la religion ou des croyances ou des convictions religieuses, du genre (y compris grossesse et affection liée à une grossesse), de l’orientation sexuelle, des caractéristiques génétiques, du statut d’ancien combattant, de l’identité de genre, de l’expression de genre, de l’âge, de l’état matrimonial, de la situation de famille, d’une invalidité ou de tout autre motif protégé par la loi applicable.

Nous nous sommes donné comme priorité d’éliminer les obstacles à l’accès égalitaire à l’emploi. C’est pourquoi un représentant des Ressources humaines collaborera avec les candidats qui demandent accommodement raisonnable pendant le recrutement. Tous les renseignements communiqués pendant le processus de demande d'accommodement seront stockés et utilisés conformément aux lois et aux politiques applicables de Manuvie. Pour demander une mesure d’accommodement raisonnable dans le cadre du recrutement, écrivez à hr@manulife.com.

Région de référence du salaire

Modalités de travail

L’échelle salariale de base prévue se situe entre

Les employés ont également la possibilité de participer à des programmes incitatifs et de recevoir une rémunération liée à la performance de l’entreprise et des individus. Le salaire de base offert variera selon les conditions du marché local, la région géographique et les facteurs propres au poste, tels que les connaissances, les compétences, les qualifications, l’expérience et la formation. Si vous postulez à ce poste en dehors de votre lieu principal, veuillez contacter hr@manulife.com pour connaître la fourchette salariale applicable à votre région.

Manuvie offre aux employés admissibles une vaste gamme d’avantages sociaux personnalisables, notamment une assurance soins médicaux, soins dentaires, santé mentale, soins de la vue, invalidité de courte et de longue durée, assurance vie et assurance DMA, assurance adoption, de maternité de substitution et de soins médicaux non urgents ainsi que des programmes d’aide aux employés et leur famille. Nous proposons également aux employés admissibles différents régimes d’épargne-retraite (y compris des régimes de rente et un programme international d’actionnariat assortie de cotisations patronales de contrepartie) ainsi que des ressources en matière d’éducation et de conseils financiers. Notre généreux programme de congés rémunérés au Canada comprend les jours fériés, les congés annuels, les congés personnels et les congés de maladie, et nous offrons toute la gamme des congés autorisés prévus par la loi. Si vous posez votre candidature à ce poste aux États-Unis, veuillez écrire à hr@manulife.com pour obtenir de plus amples renseignements sur les dispositions relatives aux congés rémunérés spécifiques aux États-Unis.

Nous utilisons des technologies de données et d’analytique, telles que l’intelligence artificielle (IA), ainsi que des outils de traitement automatisé pour analyser et traiter les renseignements que vous nous fournissez ou que des tiers nous transmettent dans le cadre du processus de demande. Pour en savoir plus, veuillez consulter notre énoncé sur la collecte de renseignements personnels.