Third-Party Risk Management (TPRM) Analyst

We’re Vancity, a member-owned credit union built on the principles of inclusion and social justice. We’re looking for a Third-Party Risk Management (TPRM) Analyst to join our IT Governance, Risk, and Compliance (IT-GRC) team. The successful candidate will perform TPRM and vendor risk assessments, and work closely with internal stakeholders and vendors to ensure that security and compliance risks are identified, assessed, and managed effectively.

Requirements

• Bachelor’s in Information Technology, Risk Management, Business, or a related field
• 2–5 years of related experience in IT Governance, Risk, and Compliance (GRC), Third-Party Risk Management, or Information Security
• A solid understanding of relevant cyber security standards and frameworks such as NIST, ISO 27001, AICPA SOC reports, PCI-DSS, OSFI, PIPEDA
• Prior working knowledge in reviewing SOC1, SOC2, PCI (AoC), and ISO 27001 reports and attestations
• Experience reviewing vendor security controls, evaluating compliance artifacts, and analyzing security risks
• Strong attention to detail and analytical thinking to identify vendor security risks and assist in remediation tracking
• Excellent communication and stakeholder management skills to engage with vendors and internal teams
• A proactive mindset with the ability to work independently and manage multiple priorities in a fast-paced environment

Benefits

• Living Wage Employer
• Customizable Benefits
• Generous Vacation
• Extra Stat Holidays
• Immediate Health Coverage
• Defined Benefit Pension