Cyber Security Analyst / Assessor
Core
Evaluate security posture of suppliers, cloud services, and AI solutions to manage third-party risks for a Victorian State Government Agency.
Role type
Senior GRC security analyst (TPRM)
Builds
Risk assessments and control gap reports for third-party suppliers, cloud platforms, SaaS, and AI-enabled technologies.
Domain
Government / Cybersecurity / Third-Party Risk Management
Required skills
Third-Party Risk Management (TPRM), security governance, cloud security (Azure/AWS), AI security risk assessment, identity and access management, API security, vulnerability management, security framework knowledge (ISO 27001, NIST, Essential Eight), risk documentation, stakeholder presentation
Preferred skills
Experience in regulated industries (government, finance), external provider coordination, specific AI architecture knowledge (LLMs, RAG, embeddings)
Technologies
Azure, AWS, SaaS, LLMs, RAG, APIs
Responsibilities
Conduct security assessments of suppliers and cloud environments; Review security architecture and technical configurations; Evaluate AI-related security risks; Validate supplier evidence and certifications; Document risks and control gaps; Provide risk-based approval recommendations; Present outcomes to governance forums.
Seniority
Senior, hands-on IC
