Senior Manager, Enterprise Third-Party Risk Management

Application Deadline:

02/15/2026

Address:

320 S Canal Street

Job Family Group:

Audit, Risk & Compliance

Opportunity Overview

This Senior Manager role within the Enterprise Third-Party Risk Management (TPRM) team provides a unique opportunity to shape the design and evolution of the enterprise TPRM Framework, while delivering strong 2nd Line Operational Risk oversight across the third-party lifecycle. You will collaborate with senior leaders, subject matter experts, and cross-functional partners to strengthen our risk management ecosystem and ensure adherence to regulatory expectations.

Mandate

As part of the TPRM team, you will actively contribute to:

- Designing, enhancing, and maintaining the enterprise-wide TPRM Framework, including policies, standards, assessment methodologies, and lifecycle requirements.

- Ensuring alignment of TPRM practices with regulatory expectations.

- Providing 2nd Line Operational Risk oversight and effective challenge over Line-of-Business third-party risk-taking activities.

- Ensuring adherence to the Enterprise Operational Risk Management Framework.

Responsibilities

Design and Enhancement of TPRM Framework

- Support the development and implementation of the Third-Party Risk Management Framework, Standards, and supporting guidance used across the enterprise.

- Strengthen TPRM methodologies for identification, assessment, monitoring, and reporting of third-party risks.

- Provide insight into emerging regulatory requirements, industry practices, and evolving risk trends.

- Collaborate with Technology, Cyber, Data and AI Risk Management SMEs, Operational Risk Officers, and others to ensure comprehensive integration of Third-Party Risk

Operational Risk Oversight & Effective Challenge

- Deliver 2nd Line oversight and effective challenge on Line-of-Business third-party activities, ensuring risks are appropriately identified, assessed, managed, monitored, and reported.

- Review and challenge high-risk engagement assessments, due diligence, control effectiveness, monitoring outcomes, and issue remediation.

- Evaluate adequacy of KRIs, dashboards, and reporting used to monitor third-party risk exposures.

- Provide subject matter expertise during operational risk events involving third parties.

Data, Analytics & Reporting

- Support development of enterprise reporting for Third-Party Risk, including dashboards, committee reporting, and trend analysis.

- Analyze internal and external data sources to identify risk themes, patterns, and insights.

- Contribute to enhancements in automation, data quality, and business intelligence capabilities.

Regulatory Engagement

- Support regulatory exams and supervisory engagements involving Third-Party Risk.

- Interpret regulatory changes and support the communication of expectations to impacted stakeholders.

- Aid in preparation of responses, documentation, and remediation actions associated with findings.

Relationship Management

- Build strong relationships with 1st and 2nd Line business partners involved in Third-Party and Operational Risk activities.

- Partner with Procurement, Technology, Cybersecurity, Data and AI, and Operational Risk teams to align oversight practices.

- Promote a culture of transparency, challenge, and continuous improvement.

Qualifications

- Undergraduate degree required; graduate degree or professional certification (e.g., CRVPM, CRISC, CISM, ORM) preferred.

- 7–10+ years of combined experience in Operational Risk Management, Third-Party Risk, Vendor Risk, or related risk disciplines.

- Strong experience in 2nd Line oversight and effective challenge.

- Deep understanding of Third-Party Risk lifecycle processes and associated regulatory expectations.

- Exposure to cyber or technology risk oversight is a strong advantage.

- Strong analytical, reporting, and communication abilities.

- Ability to manage multiple priorities, influence stakeholders, and drive meaningful improvement.

Salary:

$102,000.00 - $190,000.00

Pay Type:

Salaried

The above represents BMO Financial Group’s pay range and type.

Salaries will vary based on factors such as location, skills, experience, education, and qualifications for the role, and may include a commission structure. Salaries for part-time roles will be pro-rated based on number of hours regularly worked. For commission roles, the salary listed above represents BMO Financial Group’s expected target for the first year in this position.

BMO Financial Group’s total compensation package will vary based on the pay typ