Senior Analyst, Enterprise Risk & Operational Resilience

Venture outside the ordinary - TMX Careers

The TMX group of companies includes leading global exchanges such as the Toronto Stock Exchange, Montreal Exchange, and numerous innovative organizations enhancing capital markets.  United as a global team, we’re connecting cross-functionally, traversing industries and geographies, moving opportunity into action, advancing global economic growth, and propelling progress. Through a rich exchange of ideas, meaningful collaboration, and a nimble operating model, we're powering some of the nation's most critical systems, fueling capital formation and innovation, bringing increased opportunity to business visionaries, product ingenuity to consumers, and career exploration to our team.

Ready to be part of the action?

Join a pivotal second-line position at the heart of Canada's financial market infrastructure. As a Senior Analyst, Enterprise Risk & Operational Resilience you will be instrumental in supporting the delivery of the Enterprise Risk Management (ERM) and Operational Resilience programs across the Canadian Depository for Securities (CDS), Canada's central securities depository, clearing and settlement hub, and the Canadian Derivatives Clearing Corporation (CDCC), the national central counterparty for exchange-traded and over-the-counter derivatives – collectively known as “TMX Post-Trade.”

Reporting to the Manager, ERM, you will play a key role in the identification, assessment, monitoring, and reporting of significant non-financial risks, collaborating closely with business lines, process owners, and the Senior Leadership Team. You will be supporting the enhancement of Operational Resilience of CDS and CDCC, ensuring regulatory requirements relating to Operational Resilience are met, and providing oversight of all the non-financial risks and controls within the 1st line of defence.

Key Accountabilities: 

Operational Risk Management (ORM)

• Independently lead and support all aspects of the quarterly Risk and Control Self-Assessment (RCSA) exercise and the periodic process-based RCSA (pRCSA); maintain the corporate risk register.

• Lead the execution of the Incident Management Program, ensuring that risk events are identified, analyzed, and reported to regulators. 

• Oversee the execution and monitoring of Key Risk Indicators (KRIs) across TMX Post-Trade.

• Support the preparation of reports and materials for the Senior Leadership Team, Risk Management Committee, and Board.

• Aggregate and analyze operational risk data to identify systemic risks and emerging trends.

• Oversee first-line development and maintenance of Key Business Processes (KBPs) and propose risk mitigation measures.

• Assist in embedding new system capabilities into the ERM program, including automation of RCSA, KRI tracking, Incident Management, Operational Resilience monitoring, and Third-Party Risk assessments.

Operational Resilience Management

• Coordinate and manage the execution and maintenance of Business Impact Analyses (BIA) and Business Continuity Plans (BCPs).

• Provide support to business units in the development and execution of Disaster Recovery (DR) and BCP testing (internal and industry-wide).

• Support the manager with the project go-live readiness tabletop exercise and monitor the status of remediation plans 

Collaborative Opportunities Across Risk Programs:

While the primary focus is on Operational Resilience, there may be opportunities to contribute in a supportive role to initiatives within:

• Change Management Risk Evaluation (CMRE): Support risk identification and oversight for major changes and projects. Monitor first-line adherence to change procedures and facilitate post-implementation reviews to capture lessons learned.

​

• Third Party Risk Management (TPRM): Support the implementation of TPRM at CDCC and CDS, conduct risk-based due diligence on vendors and contribute to quarterly third-party risk reporting.

​

• Cyber Risk Management: Collaborate with ERM, ISO, and other teams to maintain cyber risk oversight. Embed cyber considerations into non-financial risk programs, support risk reporting, and help track incidents and emerging threats.

​

Must haves:

• Bachelor’s degree in Finance, Business Administration, or a related field; Master's degree preferred;

• Minimum 3 years of relevant experience in risk management, audit, or compliance within financial services or consulting.

• Experience in ERM/ORM project delivery (Operational Resilience, Risk Appetite, Internal Controls, Business Continuity, Crisis Management, Third Party Risk, Cyber Security).

• Solid understanding of financial institutions, infrastructures, and markets.

• Exceptional written and verbal communication and interpersonal  skills.

• Proven ability to navigate and influence in a matrixed structure.

• Experience presenting to senior leadership.

• Proven ability to work independently and manage multiple priorities.

• Proactive and results-oriented approach.

Nice to haves:

• Certifications in Operational Risk Management and/or Business Continuity Management (e.g., ORM, CBCP, MBCI).

• Familiarity with regulatory frameworks (e.g., CPMI-IOSCO Principles for FMIs, OSFI B-10, etc.).

• Fluency in both French and English (written and spoken) is an asset, as this role involves regular interaction with partners and stakeholders in both languages

In the market for…

Excitement - Explore emerging technology and innovation, as well as ventures and digital finance that shape the future of global markets! Experience the movement of the market while grounded in the stability of close to 200 years of success.

Connection - With site hubs in some of the world’s most multicultural cities, we leverage our size and structure to create rich connections and belonging while experiencing powerful global impact through our work.

Impact - More than a platform, we use our talents to power mission-critical systems that drive global economic advancement, innovation, and growth. As well, our employee-led Team Impact spreads social good via our giving strategy.

Wellness - From empathetic leadership to a culture of flexibility and balance, we believe wellness at work creates the maximum yield and a stronger “we”. Plus, with a cloud-first and hybrid workstyle, as well as generous time-off and leaves, we support a life well lived! 

Growth - From a growth mindset in our work, to expansion in our business, TMX is home to action-takers energized by the achievement of ambitious growth.

Ready to enrich your career with impactful work, leaders who truly care, and the flexibility and programs to help you thrive as part of #TeamTMX ? Apply now.

TMX is committed to creating and sustaining a collegial work environment in which all individuals are treated with dignity and respect and one which reflects the diversity of the community in which we operate. We provide accommodations for applicants and employees who require it.