Senior Analyst, Vendor Third Party Risk

Reporting to the Director, Procurement, the Senior Analyst, Third Party Risk is responsible for supporting the execution of the Third-Party Risk management program at CPP Investments. The Senior Analyst will lead the vendor risk assessment and due diligence process through collaboration with risk subject matter experts. The Senior Analyst will also provide guidance and support to business owners, procurement and risk subject matter experts through the identification of trends and vendor incidents.

Team Summary

The Procurement team at CPP Investments is a forward-thinking group within Technology & Operations, enabling the enterprise through effective sourcing support and robust third-party risk management. We help the organization drive value and mitigate risk by managing vendor engagements, running sourcing events, and overseeing third-party due diligence and ongoing monitoring. Our work is enabled by platforms like Oracle and ProcessUnity, and we’re continuously enhancing our capabilities through innovations like AI-assisted intake tools and chatbot-ready content. If you’re passionate about improving how organizations assess and manage third-party risk, this is a chance to make a meaningful impact at the enterprise level.

Responsibilities:

• Support the execution of CPP Investments Third-Party risk management program
• Continue to enhance standardized third-party risk management processes and lead the vendor risk assessment and due diligence process
• Support stakeholders (Business Units, Risk SMEs, etc.) by providing guidance related to any TPRM program methodology
• Manage and monitor for accuracy the information risk questionnaires of third-party vendors, which would
• Collaborate with risk subject matter experts to strengthen and continually improve CPP Investments control framework
• Assist with third-party due diligence process ensuring processes are followed which may include liaising with vendors and internal stakeholders to ensure vendor risk questionnaires and assessments are completed
• Identify issues and monitor trends, to support ongoing vendor management As required, support the execution of the wider Risk & Controls work program, including internal audits, enterprise risk assessment processes and other consulting / project work.
• Track and report on the status and results of third-party risk assessments, oversee remediations resulting from risk assessment activities including ongoing monitoring, audits and remediation actions; Review aggregate third party issues and incident tracker
• Provide guidance and support to business owners on third party risk management best practices and standards
• Support reporting requirements to key risk stakeholders
• Support execution of ongoing monitoring program conducted by Business Units