Third Party Risk Analyst
Core
Perform end-to-end third-party security risk assessments, including vendor intake, risk tiering, evidence review, analysis, and reporting.
Role type
Third-party risk analyst
Builds
Risk assessment reports and remediation tracking for vendors
Domain
Cybersecurity / Third-party risk management
Required skills
Third-party/vendor risk assessment, Cyber risk analysis, Security controls knowledge, Risk classification frameworks, Stakeholder communication, Assessment tools (e.g., UpGuard), Risk management, Privacy and data breach obligations
Preferred skills
CISSP, CCSP, CISM, ISO 27001, PSPF, ISM, NIST, Essential Eight
Technologies
UpGuard
Responsibilities
Perform end-to-end third-party security risk assessments, Apply risk classification frameworks to determine assessment scope and priorities, Prepare clear risk assessment reports and communicate findings to stakeholders and leadership, Coordinate remediation activities, track assessment outcomes, and monitor identified risks, Ensure compliance with Australian Government security standards and frameworks, Contribute to continuous improvement of assessment processes, templates, and methodologies
