Vp - Operational Risk Officer - Third Party Risk Management

In a changing world, unprecedented challenges require unmatched talent. Join one of Montreal's Top Employers in 2024. We are a dynamic and growing organization having its main establishment located in downtown Montreal and part of a leading international banking institution fully committed to building a more sustainable future. Note that the position may be in the Canadian Branch of BNP Paribas or in one of its subsidiaries based in Montreal.

**The position at a glance**

RISK ORM CIB Americas acts as 2nd line of defense and aims to provide RISK and CIB Management with a front to back consolidated view on operational risks of CIB activities in order to contribute to the reduction of operational risk and better respond to Regulator’s expectations.

Third Party Risk Management (TPRM) is a transversal field of expertise within RISK ORM. It captures the process of identifying, analyzing, informing, mitigating and controlling the end-to-end risks presented to a BNP Paribas entity, its data, its operations, its finance and its reputation when engaging in an arrangement with an external or internal party(s). This role will be responsible for identification of key third-party risks to the Bank and influencing business, functions, and technology partners to take sound risk management decisions.

**In detail**

The role is responsible for providing independent oversight and strategic 2LOD guidance on Third Party Risk Management domains across both direct and indirect areas of responsibility for the CIB Americas set of operating entities.

In this capacity, the role will report to the Head of RISK ORM TPRM, CIB Americas. The day-to-day focus may vary depending on the requirements of the overall program across CIB Americas and may include independent testing, review of projects, risk assessment, risk reporting, check and challenge, development of new tools and methodologies, etc.

Key responsibilities will include:
Review and validate risk assessments and mitigation plans for critical third-party providers issuing opinions and recommendations that influence adherence to standards and exposure aligned with risk appetite.

Manage, oversee, or contribute to missions that are designed to evaluate the adequacy and effectiveness of controls implemented by the first line to manage technology risks arising from third-party relationships - tracking issues through to conclusion.

Monitor and report on incidents involving third-party technology failures or breaches, ensuring lessons learned are incorporated into risk management practices and perform check and challenge in-line to the RISK guidance - including support the development and implementation of incident response and crisis management strategies for third-party technology incidents.

Counsel business unit managers (e.g., Front Office) on risk management issues to ensure awareness and accountability for TPRM risks.

Facilitate training and awareness programs for stakeholders involved in third-party technology risk management.

Perform gap analysis of regulations or regulatory consultations related to third party risk management against internal framework, propose remedial actions where needed.

A keen sense of risk anticipation with attention to details and an ingrained ability to connect the dots and challenge status quo.

Demonstrated capabilities in actively partnering and networking across various business lines and functions across the organization in the execution of responsibilities.

Work conditions: This position provides for standard working conditions in an office and a normal work schedule from Monday to Friday.

**The strengths and skills that will help you succeed**

Bachelor’s degree in business management or IT.

Professional certifications such as CISA, CISSP, or CISM are an asset.

Strong knowledge of regulatory requirements and industry standards for technology risk management.

Develop stakeholder management skills: ability to influence, to negotiate, to conceptualize issues and translate ideas into solutions.

Experience working with legal and procurement team as part of contract design to include key provisions for IT GRC, Third Party Risk Management is preferred.

Proficiency with data analysis and visualization tools such as PowerBI, Tableau, and Excel.

Given the vast majority of our clients, both internal and external, are based outside of Quebec and Canada, specific language requirements may apply. Knowledge of the English is required.

**What’s in it for you**

In addition to competitive compensation, we offer flexible benefits including a family and spouse insurance program, a defined contribution pension plan and paid days for volunteering. Hybrid work arrangements are available for most positions. In-office presence is required a minimum of 3 days per week, one of which must be on a Monday and/or a Friday. BNP Paribas provides excellent training and personal development programs, as well as opportunities for career development within the co