In a changing world, unprecedented challenges require unmatched talent. Join one of Montreal's Top Employers in 2024. We are a dynamic and growing organization having its main establishment located in downtown Montreal and part of a leading international banking institution fully committed to building a more sustainable future. Note that the position may be in the Canadian Branch of BNP Paribas or in one of its subsidiaries based in Montreal. 

The position at a glance

RISK ORM CIB Americas acts as 2nd line of defense and aims to provide RISK and CIB Management with a front to back consolidated view on operational risks of CIB activities in order to contribute to the reduction of operational risk and better respond to Regulator’s expectations. 

Third Party Risk Management (TPRM) is a transversal field of expertise within RISK ORM. It captures the process of identifying, analyzing, informing, mitigating and controlling the end-to-end risks presented to a BNP Paribas entity, its data, its operations, its finance and its reputation when engaging in an arrangement with an external or internal party(s). This role will be responsible for identification of key third-party risks to the Bank and influencing business, functions, and technology partners to take sound risk management decisions.

In detail

The role is responsible for providing independent oversight and strategic 2LOD guidance on Third Party Risk Management domains across both direct and indirect areas of responsibility for the CIB Americas set of operating entities.

In this capacity, the role will report to the Head of RISK ORM TPRM, CIB Americas. The day-to-day focus may vary depending on the requirements of the overall program across CIB Americas and may include independent testing, review of projects, risk assessment, risk reporting, check and challenge, development of new tools and methodologies, etc. 

Key responsibilities will include:

• Establish himself / herself as the second line of defense subject matter expert for key stakeholders in matters related to TPRM for CIB Americas by providing independent oversight of the first line's third-party technology risk activities, including onboarding, due diligence, risk assessments, and ongoing monitoring.
• Review and validate risk assessments and mitigation plans for critical third-party providers issuing opinions and recommendations that influence adherence to standards and exposure aligned with risk appetite.
• Manage, oversee, or contribute to missions that are designed to evaluate the adequacy and effectiveness of controls implemented by the first line to manage technology risks arising from third-party relationships – tracking issues through to conclusion.
• Monitor and report on incidents involving third-party technology failures or breaches, ensuring lessons learned are incorporated into risk management practices and perform check and challenge in-line to the RISK guidance – including support the development and implementation of incident response and crisis management strategies for third-party technology incidents.
• Counsel business unit managers (e.g., Front Office) on risk management issues to ensure awareness and accountability for TPRM risks.
• Facilitate training and awareness programs for stakeholders involved in third-party technology risk management.
• Perform gap analysis of regulations or regulatory consultations related to third party risk management against internal framework, propose remedial actions where needed. 
• A keen sense of risk anticipation with attention to details and an ingrained ability to connect the dots and challenge status quo.
• Demonstrated capabilities in actively partnering and networking across various business lines and functions across the organization in the execution of responsibilities.

Work conditions: This position provides for standard working conditions in an office and a normal work schedule from Monday to Friday. 

The strengths and skills that will help you succeed

• Bachelor’s degree in business management or IT.
• The successful candidate will have a minimum of 8 years’ experience in Third-Party Risk Management, ICT (IT / InfoSec) Risk Management, Operational Risk Management, Audit, Compliance and Control.
• Professional certifications such as CISA, CISSP, or CISM are an asset.
• Strong knowledge of regulatory requirements and industry standards for technology risk management. 
• Develop stakeholder management skills: ability to influence, to negotiate, to conceptualize issues and translate ideas into solutions. 
• Experience working with legal and procurement team as part of contract design to include key provisions for IT GRC, Third Party Risk Management is preferred.
• Proficiency with data analysis and visualization tools such as PowerBI, Tableau, and Excel.
• Given the vast majority of our clients, both internal and external, are based outside of Quebec and Canada, specific language requirements may apply. Knowledge of the English is required.

What’s in it for you

In addition to competitive compensation, we offer flexible benefits including a family and spouse insurance program, a defined contribution pension plan and paid days for volunteering. Hybrid work arrangements are available for most positions. In-office presence is required a minimum of 3 days per week, one of which must be on a Monday and/or a Friday. BNP Paribas provides excellent training and personal development programs, as well as opportunities for career development within the company and internationally.

To find out more about our range of benefits, click here

What you need to know

Diversity, Equity and Inclusion (DE&I) at the heart of our commitments

At BNP Paribas all employees are on an equal footing allowing us to create a work environment that values and respects people for their talents, skills and competences.

BNP Paribas recruits, employs, trains, compensates and promotes regardless of race, religion, colour, national origin, sex, disability, age, and other protected status (Employment Equity Act and Canadian Human Right Act).

To learn more about our DE&I commitments, click here

About us

BNP Paribas is the top bank in the European Union and a major international banking establishment. Present in 63 countries, with more than 180,000 employees, the bank holds key positions in several areas of banking and financial services.

BNP Paribas’ mission is to contribute to a responsible and sustainable economy by financing and advising its clients according to the highest ethical standards, while striving to respond to essential concerns in terms of the environment, regional development and social inclusion.

Since 1961, BNP Paribas has supported large Canadian companies and institutions in their business development by offering a full range of specialized financial services and investment products.

With over 1,400 employees, BNP Paribas in Canada continues to attract experts from diverse fields as well as ambitious young talent from around the world. We are proud to offer our employees a rewarding and international workplace where they can build their professional careers by honing their skills, meeting challenges and enriching their knowledge of the financial industry.

Our certifications and partnerships

• Montreal’s Top Employers 2024
• Canada’s Best Diversity Employers 2024
• Women in Governance – Parity certified -  Platinum certification
• Pride at Work Canada
• Rainbow Accreditation issued by Canada’s LGBT+ Chamber of Commerce (CGLCC)
• Part of Les Affaires top 300 companies in Quebec
• Synclusiv
• Ready, Willing and Able 
• Autisme sans Limites 
• LinkedIn Top Companies 2024

Do you want to discover other BNP Paribas offers in Canada?

Click here: BNP Paribas in Canada | Our job offers

** Only selected applications that meet the requirements of the role will be contacted **