Sr. Erm Analyst

Ready to make an impact?
Reporting to the Director, Enterprise Risk Management, the Sr. ERM Analyst is responsible for administration and continuous improvement of how ERM collects, analyzes, and reports risk information. The analyst also serves as the business administrator for Governance, Risk and Compliance (GRC) platform and provides second-line oversight and effective challenge of third-party risk management.
This role combines technical expertise with a strong understanding of risk monitoring best practices to ensure ERM policies and procedures are maintained.
Here is where you will be focusing to ensure your success.Risk Analytics & Reporting
Responsible for building reliable dashboards, prepares insights for senior management and risk committees, and improves the workflows behind recurring reports to reduce manual effort and strengthen data quality.
Use data querying and analysis tools to reconcile risk data, investigate threshold breaches, and identify emerging trends. Explain what has changed and where follow-up is required to senior management and risk committees.
Streamline data collection, validation, and report refreshes using approved automation tools and where useful, approved AI tools. Keep metrics traceable to their sources, retain human review of material conclusions, and measure improvements in turnaround time, manual effort and data quality.
Support ERM activities such as risk appetite monitoring, operational risk assessments, and operational resilience reporting.
GRC System Administration
Serve as day-to-date administrator of GRC platform including access management. Configure and maintain forms, workflows, reference data, notifications, dashboards, and reports that support ERM programs.
Manage backlog of system issues and enhancements. Translate business requirements into configuration changes, coordinate user acceptance testing, and document approvals before release
Monitor data quality and workflow exceptions. Troubleshoot issues, support users, maintain training materials and coordinate with Technology and Information Security or the vendor on technical issues and integrations
Third-party risk oversight and effective challenge
Review and challenge first-line third-party risk assessments, prioritizing higher risk and more critical arrangements. Evaluate whether the evidence supports criticality and risk ratings, due diligence conclusions, proposed controls, and residual risk assessments.
Monitor enterprise-wide third-party exposures, including concentration and dependencies that could disrupt critical operations. Use risk indicators, incidents, exceptions, and overdue assessments or actions to prioritize reviews.
Challenge the adequacy of remediation plans and evidence of completion. Document findings and elevate material exposures, unresolved gaps, and risk appetite breaches through established governance channels.
Recommend improvements to the third-party risk management program, reporting and workflows based on oversight findings.
What we are looking for.
Advanced degree in a relevant field (e.G., Data Science, Statistics, Actuarial, Math, Economics).
3+ years of progressive experience in a data science/data analytics role.
Proficiency and demonstrated experience using data analysis tools (e.G., AWS Sagemaker, Python, R, SQL, Alteryx, PowerBI, Snowflake), working knowledge of AI and machine learning techniques.
Advanced analytical and problem-solving skills with the ability to interpret complex data sets and explain and share information with a non-technical audience.
Detail-oriented with a strong focus on accuracy and data integrity.
Hands-on experience administering a GRC platform or comparable enterprise workflow system, including configuration, permissions, testing and user support.
A self-starter with the ability to work independently and manage multiple priorities in a fast-paced environment with minimal guidance. Takes the initiative for self-directed learning and development.
Strong communication and interpersonal skills, enabling the incumbent to work collaboratively and effectively with cross-functional teams.
Demonstrated ability to contribute to a positive work environment by actively participating in team discussions, supporting team members, and sharing knowledge and expertise.
Preferred.
Experience providing second-line oversight and effective challenge in regulated financial institution, (ideally insurance or mortgage lending), specifically focusing on third party vendor risks, operational risk frameworks (RCSAs, KRIs), and compliance with regulatory standards.
Familiarity with OSFI Guidelines B-10, E-21 and B-13 and related expectations for operational resilience.
#LI-HYBRID
#J-18808-Ljbffr