Third Party Risk Analyst
Core
Perform end-to-end third-party security risk assessments, including vendor intake, risk tiering, evidence review, analysis, and reporting.
Role type
Third-party risk analyst (cybersecurity)
Builds
Security risk assessments and compliance reports for Australian Government vendors
Domain
Cybersecurity / Third-party risk management
Required skills
Third-party/vendor risk assessment, Cyber risk analysis, Security controls evaluation, Risk classification frameworks, Stakeholder communication, Assessment tools (e.g., UpGuard), Regulatory compliance (PSPF, ISM, ISO 27001, NIST, Essential Eight)
Preferred skills
CISSP, CCSP, CISM, ISO 27001 certification, Privacy and data breach obligations knowledge (via careerplan.io/jobs/3aa2b4b7-a206-4649-ad1c-c3471ed9ef94-third-party-risk-analyst-at-peoplebank)
Technologies
UpGuard
Responsibilities
Perform end-to-end third-party security risk assessments, Apply risk classification frameworks to determine assessment scope, Prepare clear risk assessment reports, Coordinate remediation activities, Ensure compliance with Australian Government security standards, Contribute to continuous improvement of assessment processes
Seniority
Mid-level, hands-on IC
