Senior Risk Analyst, Enterprise Risk Management

Canadian Tire Corporation•Oakville, ON

About The Position

In this 12-month contract, the Senior Risk Analyst will report to the Manager, Enterprise Risk Management (ERM) and play a key role in supporting the ongoing enhancement, implementation, and operation of Canadian Tire Bank’s ERM Program. The successful candidate will partner with stakeholders across the Bank and Canadian Tire Corporation to provide strong second line oversight, support compliance with evolving OSFI regulatory expectations, and help embed effective risk management practices across the organization. This role will also support the implementation and ongoing use of the Bank’s GRC platform (IBM OpenPages) to enable consistent risk identification, assessment, monitoring, and reporting.

Requirements

5+ years of experience in operational risk, enterprise risk, non‑financial risk, audit, or compliance within a regulated environment (banking or financial services strongly preferred).
Post‑secondary education (degree or diploma) in a business‑related discipline.
Strong working knowledge of OSFI regulatory expectations and risk management practices related to operational and non‑financial risks.
Strong analytical, critical‑thinking, and problem‑solving skills.
Excellent written and verbal communication skills, with experience preparing materials for senior management and risk committees.
Strong organizational skills and the ability to manage multiple priorities and deadlines.
Proven ability to build strong working relationships and collaborate across cross‑functional teams.
Ability to work independently as well as within a team of risk professionals.
Proficient in Microsoft Office (Word, Excel, PowerPoint).

Nice To Haves

Hands‑on experience with risk and control self‑assessments (RCSA) and operational risk monitoring is strongly preferred.
Experience with GRC platforms, particularly IBM OpenPages, is a strong asset.
Knowledge of third‑party risk management, issue management, and operational resilience concepts is an asset.
Professional risk certification (e.g., CRMP, FRM, PRM) is an asset.

Responsibilities

Support the Manager, ERM in the development, enhancement, and maintenance of the Bank’s Operational Risk Management framework, including policies, methodologies, tools, and governance processes.
Support enterprise‑wide risk and control self‑assessments (RCSA), including risk identification, inherent and residual risk assessment, control effectiveness evaluations, and action tracking.
Monitor and assess compliance with OSFI regulatory guidance and expectations related to operational and non‑financial risks, including emerging regulatory requirements, and collaborate with business partners on mitigation strategies where necessary.
Perform second line oversight and monitoring activities, including thematic reviews, scenario analysis, key risk indicator (KRI) monitoring, and issue tracking.
Support the implementation, administration, and ongoing enhancement of the Bank’s GRC solution (IBM OpenPages), including risk taxonomy, workflows, reporting, data quality, and user support.
Partner with first line business units to provide operational risk management guidance, credible challenge, and oversight, ensuring consistent adoption of ERM standards and tools.
Collaborate with stakeholders across the organization to support risk committee governance, including preparation of materials, reporting, and analysis for various risk committees (e.g., Cross‑functional Risk Committee and other management‑level risk forums).
Develop and maintain clear, concise management and Board‑level operational risk reporting, including dashboards, key themes, emerging risks, and trend analysis.
Provide oversight of the Bank’s Third‑Party Risk Management framework, including assessment of non‑financial risks related to vendors and outsourced arrangements, and act as a subject matter expert on related policies, processes, and supporting technology.
Maintain and enhance the Bank’s risk taxonomy, risk classification framework, and issue management processes in alignment with regulatory expectations and internal standards.
Contribute to continuous improvement initiatives focused on strengthening governance, automation, reporting quality, and operational risk maturity.
Other responsibilities as assigned.