Senior Manager, Procurement Vendor Risk & Governance

Manulife • Toronto, ON

19h • CA$92,900 - CA$142,900 • Hybrid

About The Position

The Senior Manager, Procurement Vendor Risk & Governance is responsible for leading key elements of the Company's Third-Party Risk Management (TPRM) and governance program. This role provides strategic leadership, oversight, and effective challenge to ensure procurement-managed third parties are governed in accordance with internal standards, regulatory requirements, and enterprise risk management expectations.
The incumbent serves as a senior subject matter expert in Third-Party Risk Management and Operational Risk Management, providing guidance on governance frameworks, risk assessments, ongoing monitoring, regulatory compliance, operational resilience, and risk reporting.
The role partners closely with Business Units, Procurement, Operational Risk, Compliance, Legal, Information Security, and Audit functions to strengthen third-party risk oversight and drive continuous improvement of governance practices. The incumbent is accountable for the development and delivery of governance processes, reporting, metrics, training, executive communications, quality assurance, and regulatory engagement activities.
The role also leads the Procurement Governance Quality Assurance (QA) Program, providing independent review and challenge of governance activities to promote consistency, regulatory compliance, control effectiveness, and continuous improvement across procurement-managed third-party risk processes.

Requirements

• Undergraduate degree in Business, Finance, Risk Management, Accounting, Technology, Law, or a related discipline.
• 8+ years of progressive experience in Third-Party Risk Management, Vendor Governance, Operational Risk, Enterprise Risk, Compliance, Audit, Procurement, or related functions.
• Strong understanding of third-party risk management frameworks, outsourcing risk management, operational risk principles, regulatory expectations, and governance best practices.
• Demonstrated knowledge of risk assessment methodologies, risk reporting, governance practices, quality assurance programs, and control frameworks.
• Experience designing, implementing, or leading Quality Assurance (QA), Quality Control (QC), operational risk testing, compliance testing, or governance review programs.
• Strong understanding of control effectiveness reviews, root cause analysis, issue remediation, and continuous improvement methodologies.
• Experience supporting regulatory examinations, audits, issue management, corrective action plans, and governance committees.
• Strong analytical capabilities with the ability to interpret complex data and communicate meaningful insights to senior stakeholders.
• Proven ability to influence decisions and build productive relationships across business, risk, and control functions.
• Experience developing executive and Board-level reporting and presentations.
• Strong communication, stakeholder management, and leadership skills.
• Ability to lead cross-functional initiatives, manage competing priorities, and operate effectively in a complex global environment.

Nice To Haves

• Professional certifications such as CRISC, CISA, CISSP, ORM, CPA, or equivalent are considered an asset.

Responsibilities

• Lead the execution and continuous enhancement of the Third-Party Risk Management and Vendor Governance framework, ensuring alignment with regulatory requirements and enterprise risk management practices.
• Provide leadership and oversight of third-party risk governance activities across the third-party lifecycle, including onboarding, ongoing monitoring, issue management, and offboarding.
• Serve as a senior subject matter expert on third-party risk, operational risk, outsourcing risk, and regulatory requirements, providing guidance and effective challenge to stakeholders and business partners.
• Lead the development, implementation, and maintenance of governance policies, standards, procedures, methodologies, and tools supporting third-party risk management.
• Define, monitor, and report key risk indicators (KRIs), key performance indicators (KPIs), control effectiveness metrics, and governance outcomes to senior leadership, executive committees, and risk governance forums.
• Lead preparation and coordination of responses to regulatory reviews, examinations, internal audits, external audits, operational risk assessments, and compliance reviews.
• Partner with Operational Risk, Compliance, Legal, Technology Risk, Privacy, Information Security, Procurement, and business stakeholders to support effective risk management and governance decision-making.
• Analyze emerging risks, industry trends, regulatory developments, and evolving third-party risk practices and recommend enhancements to governance processes and controls.
• Oversee the development of executive and Board-level reporting, providing meaningful insights into third-party risk exposure, risk trends, remediation activities, and program effectiveness.
• Drive continuous improvement initiatives, including process optimization, automation, data analytics, governance transformation, and operational effectiveness enhancements.
• Support and mentor team members, fostering a culture of risk awareness, accountability, continuous improvement, and professional development.
• Participate in strategic planning activities and contribute to the evolution of the global third-party risk and governance operating model.
• Lead the Procurement Governance Quality Assurance (QA) Program, including the execution of risk-based quality reviews across third-party risk assessments, due diligence, ongoing monitoring, governance decisions, and lifecycle controls. Monitor adherence to policies, standards, procedures, and regulatory requirements; identify trends and improvement opportunities; provide reporting and insights to leadership; and drive remediation activities to strengthen governance effectiveness, consistency, and control quality.
• Lead, develop, and coach a team of risk and governance professionals, providing performance management, talent development, succession planning, workforce planning, and day-to-day leadership. Foster a culture of accountability, innovation, continuous improvement, and operational excellence while ensuring successful delivery of strategic and operational objectives.

Benefits

• health, dental, mental health, vision, short- and long-term disability, life and AD&D insurance coverage, adoption/surrogacy and wellness benefits, and employee/family assistance plans.
• various retirement savings plans (including pension and a global share ownership plan with employer matching contributions) and financial education and counseling resources.
• generous paid time off program in Canada includes holidays, vacation, personal, and sick days, and we offer the full range of statutory leaves of absence.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree