Bilingual Director, Third Party Risk Management Program

Position Summary

The Bilingual Director, Third Party Risk Management Program is responsible for managing and improving Crawford’s Third Party Risk Management Program. The Director will further develop and guide our supplier intake and due diligence, lifecycle management, and offboarding. Ability to work remotley from home in Ontario with some travel to the Toronto and Waterloo Offices.

Responsibilities

• Manage program-related activities and deliverables to ensure effective collaboration within the team and across stakeholder groups
• Oversight of the risk and controls defined across the third-party lifecycle throughout Crawford, across various global regions
• Play a key supporting role in identifying third party requirements for technology and cyber third-party processes, including effective challenge and risk-informed recommendations
• Develop requirements and oversight for the use of third parties and other key third party technology governance processes
• Provide input into the third-party framework to account for the use and monitoring of emerging tech, e.g., GenAI
• Collaborate with key stakeholders on an enhanced playbook for third party cyber incidents and vulnerabilities
• Understand and integrate the emerging rules/laws around TPRM, e.g., digital resiliency rules (e.g. Digital Operational Resilience Act), the third-party requirements, and impacts to third-party risk programs across the enterprise
  
  

Requirements

• Bilingual - fluent in French & English
• Four year college (Bachelor’s Degree)
• At least 5 years of experience in third party technology, cybersecurity operations or governance oversight
• At least 5 years of Financial Services / Insurance Risk Management Experience (or other highly regulated field)
• At least 2 year of experience producing executive level reporting and analysis
• At least 1 year experience in policy management
• Ability to articulate complex technical concepts in clear, concise, actionable manner through both written products and verbal communications
• Standard office tool capability, e.g., Excel spreadsheets
• Supervision of staff
• Knowledge of Onspring and Coupa systems
• Prefer experience and understanding of regulatory requirements relating to; TPRM, Privacy and cybersecurity including SOC2 Type 2, ISO27001, ISAE 3000 and NIST, UK
• Prefer experience and understanding of wider regulatory framework requirements including; Modern Slavery and Human Rights Due Diligence, KYC/CDD, Anti Money Laundering, Anti Bribery, UK FCA and Prudential regulation
• Prefer understanding and experience of the insurance claims handling processes, market dynamics and organizational structure
• Prefer understanding and experience of the Financial Services regulatory regime and wider legislative areas impacting third party risks
  
  

Additional Information

We thank all applicants for their interest in Crawford & Company however, only those selected for an interview will be contacted.

Crawford is an Employment Equity employer committed to diversity and inclusion. We welcome applications from visible minority group members, women, Aboriginal people, persons with disabilities, members of sexual minority groups and others who may contribute to the further diversification of ideas.

Crawford is committed to accommodating applicants with disabilities throughout the hiring process, in accordance with the Ontario Human Rights Code, Accessibility for Ontarians with Disabilities Act and Crawford’s own policies. We will work with applicants requesting accommodations at any stage of the hiring process. Applicants are required to provide their accommodation needs in advance and submit adequate documentation to support their request for accommodation in the assessment process and/or to perform the essential duties of the posted position. If you have an accommodation need, please email resumes@crawco.ca as soon as possible to make appropriate arrangements.