Venture outside the ordinary - TMX Careers The TMX group of companies includes leading global exchanges such as the Toronto Stock Exchange, Montreal Exchange, and numerous innovative organizations enhancing capital markets. United as a global team, we’re connecting cross-functionally, traversing industries and geographies, moving opportunity into action, advancing global economic growth, and propelling progress. Through a rich exchange of ideas, meaningful collaboration, and a nimble operating model, we're powering some of the nation's most critical systems, fueling capital formation and innovation, bringing increased opportunity to business visionaries, product ingenuity to consumers, and career exploration to our team.

Ready to be part of the action? Join a pivotal second-line position at the heart of Canada's financial market infrastructure. As a Senior Analyst, Enterprise Risk & Operational Resilience you will be instrumental in supporting the delivery of the Enterprise Risk Management (ERM) and Operational Resilience program s across the Canadian Depository for Securities (CDS ), Canada's central securities depository, clearing and settlement hub, and the Canadian Derivatives Clearing Corporation (CDCC) , the national central counterparty for exchange-traded and over-the-counter derivatives – collectively known as “TMX Post-Trade.”

Reporting to the Manager, ERM, you will play a key role in the identification, assessment, monitoring, and reporting of significant non-financial risks, collaborating closely with business lines, process owners, and the Senior Leadership Team. You will be supporting the enhancement of Operational Resilience of CDS and CDCC, ensuring regulatory requirements relating to Operational Resilience are met, and providing oversight of all the non-financial risks and controls within the 1st line of defence.

Key Responsibilities Third Party Risk Management (TPRM)

• Support the Manager, ERM in developing and maintaining the TPRM governance framework, ensuring alignment with CDCC and CDS risk appetite.
• Support the efficient and effective implementation of the TPRM program across CDCC and CDS, including performing materiality assessment and risk-based due diligence on vendors onboarded as part of business initiatives and BAU.
• Provide guidance and training to Business Units on the requirements and responsibilities included in the TPRM governance.
• Contribute to the preparation and delivery of the quarterly reporting process on the third-party risk profile
• Assist in the deployment and application of new tools to automate and optimize third-party monitoring and reporting processes.
• Support the Manager, ERM in driving continuous improvement of Post-Trade's TPRM program by analyzing industry trends and benchmarking against evolving global regulations (i.e. DORA), operational resilience and regulatory compliance.

Cyber Risk Management

• Support the collaboration with the TMX Information Security Office (ISO) and other stakeholders to maintain a current and comprehensive view of cyber risks impacting CDCC and CDS.
• Assist in embedding cyber risk considerations into non-financial risk programs, such as TPRM and Operational Risk Management.
• Contribute to the preparation and delivery of regular cybersecurity risk reporting to internal stakeholders and governance committees (e.g., quarterly dashboards, board reporting).
• Help track cybersecurity incidents and emerging threats, identifying trends and supporting lessons learned, and remediation tracking.

Regulatory Initiatives & Reviews

• Support Manager, ERM in addressing non-financial risk regulatory inquiries related to regulatory initiatives and reviews.
• Support the ERM Manager and Director in developing and implementing emerging best practices that align with both regulatory requirements and broader industry standards.
• Support Manager, ERM in monitoring and analyzing internal and external environments to identify emerging risks that may impact TMX Post-Trade's strategic objectives and risk profile, and report to senior management

Change Management Risk Evaluation (CMRE)

• Support the identification, assessment, and oversight of the overall risk profile associated with significant changes and projects
• Monitor the first line’s adherence to internal change management procedures impacting operational risk and resilience.
• Facilitate post-implementation reviews of change initiatives, assessing risk outcomes and incorporating lessons learned into future CMRE processes.

Collaborative Opportunities Across Enterprise Risk Management Programs While the primary focus is on Third Party Risk Management (TPRM), there may be opportunities to contribute in a supportive role to initiatives within:

• Operational Risk Management (ORM): Support risk assessment and oversight for operational activities. Lead incident management, monitor key risk indicators, and analyze operational risk data to identify trends and inform strategic decisions.
• Business Continuity Management: Coordinate and maintain Business Impact Analyses (BIA) and Business Continuity Plans (BCP). Provide training and oversight for Disaster Recovery (DR) and BCP testing.

Must Haves

• Bachelor’s degree in Finance, Business Administration, or a related field; Master's degree preferred
• Minimum of 3 years of relevant experience in risk management, audit, or compliance functions within the financial services industry or consulting firms
• Experience in the delivery of ERM/ORM projects, including but not limited to: Operational Resilience, Risk Appetite, Internal Controls, Business Continuity Management, Crisis Management, Third Party Risk Management, Cyber Security, and other related operational resilience concepts
• Solid understanding of financial institutions, infrastructures, and markets
• Exceptional written and verbal communication skills, including the ability to articulate complex risk concepts clearly and concisely to diverse audiences
• Proven ability to work independently with multiple stakeholders across different business units, manage multiple priorities effectively, and drive tasks to completion with minimal supervision
• A proactive and results-oriented approach, demonstrating ownership and accountability for assigned responsibilities

Nice To Haves

• Certifications in Operational Risk Management, Business Continuity Management, Third Party Risk Management and/or Cyber Risk Management (e.g., ORM, CBCP, MBCI)
• Familiarity with regulatory frameworks (e.g., CPMI-IOSCO Principles for FMIs, OSFI B-10, etc.)
• Fluency in both French and English (written and spoken) is an asset, as this role involves regular interaction with partners and stakeholders in both languages

In the market for… Excitement

• Explore emerging technology and innovation, as well as ventures and digital finance that shape the future of global markets! Experience the movement of the market while grounded in the stability of close to 200 years of success.

Connection

• With site hubs in some of the world’s most multicultural cities, we leverage our size and structure to create rich connections and belonging while experiencing powerful global impact through our work.

Impact

• More than a platform, we use our talents to power mission-critical systems that drive global economic advancement, innovation, and growth. As well, our employee-led Team Impact spreads social good via our giving strategy.

Wellness

• From empathetic leadership to a culture of flexibility and balance, we believe wellness at work creates the maximum yield and a stronger “we”. Plus, with a cloud-first and hybrid workstyle, as well as generous time-off and leaves, we support a life well lived!

Growth

• From a growth mindset in our work, to expansion in our business, TMX is home to action-takers energized by the achievement of ambitious growth.

Ready to enrich your career with impactful work, leaders who truly care, and the flexibility and programs to help you thrive as part of #TeamTMX ? Apply now. TMX is committed to creating and sustaining a collegial work environment in which all individuals are treated with dignity and respect and one which reflects the diversity of the community in which we operate. We provide accommodations for applicants and employees who require it.