Senior Resilience Analyst - Third-Party Resilience

Come and join Thomson Reuters as a Senior Resilience Analyst Third-Party within the Risk & Compliance team as we work to transform Thomson Reuters into a content-driven technology company. With the transformation comes new and emerging risks. We are looking for curious, collaborative, and driven risk professionals who can partner with all TR stakeholders to help us make more informed decisions that balance risk and reward.

This is an exciting opportunity to be part of a new, diverse team with an opportunity to shape the strategic direction of the enterprise-wide risk management program.

The Senior Resilience Analyst Third-Party is a versatile and innovative risk professional who can support all aspects of Resilience, including Business Continuity, Disaster Recovery and Corporate Crisis Management. You will be responsible for supporting the implementation of a global, enterprise level and sustainable resilience framework in conjunction with a wide range of business stakeholders.

About the Role:

As the Senior Resilience Analyst, you will:

• Define the standard of adequate contingency plans for critical third- parties
• Wholistically pull the together the internal and external plans in case of third-party disruption
• Work with critical TR stakeholders to inform them of the Resilience framework and its importance.
• Will play a critical role in the mapping of vendors against critical operations as part of the operational Resilience Program
• Work with Third-party risk management team to review and approve Business Continuity and Disaster Recovery clauses
• Deliver subject matter expertise on resilience control function responsibilities within the Third-party lifecycle activities.
• Have an in-depth knowledge of Business Impact Analyses and work with key stakeholders to get them completed.
• Deliver BIA training sessions for process and asset owners to better familiarize them of expectations and requirements.
• Support the implementation of common resiliency and recovery taxonomies and policies.
• Identify business processes and then work to ensure they are resilient.
• Meet KPIs for process identification and BIA completion.
• Leverage BIA output to design new recovery strategies and refresh existing strategies for maintenance and resumption of operations to meet business requirements.
• Document the strategic information captured through the BIA within standardized business recovery plan templates to support the execution of strategies and the continuation and recovery of business activities.
• Work with the other teams in Risk and Compliance to drive efficiencies and risk mitigation capabilities across the Risk and Compliance organization.
• Work together with Third-Party Risk to identify critical third-party vendors (leveraging BIA output) and begin to co-develop recovery strategies with vendors to support continuity of services.
• Support the enterprise-wide Crisis Management process and integrate escalation and response protocols into the Resiliency function.

About you:

• A Bachelors degree level in relevant subject (e.g., Business Administration/Management, Economics, Finance, Technology, Innovation)
• 5+ years in a similar role or any valid combination of education and experience
• Versatility to understand various and complex subjects to adequately build collaborative, productive and trust-based relationships within the business segments and functions
• Solid experience in creating, editing, and proofreading executive-level documentation and material
• Proven ability to take initiative and influence within a matrix organization to achieve results
• Knowledge of controls in business and technology environments (e.g., SOx)
• Expert knowledge of MS Office (Word, Excel, PowerPoint)
• Strong knowledge of GRC tools, specifically Fusion
• Excellent organizational skills and attention to detail, with the ability to autonomously set and meet deadlines

Additional key differentiators would be:

• Hands-on experience in the design and scaling of a Resilience Framework and enhancing organisational maturity.
• In depth knowledge of ISO 22301.
• In depth knowledge of Fusion, including process automation.
• Technology fluency: Knowledge of PowerBI, Tableau and good understanding of technology concepts such as AI, ML, RPA, and data science.