AI-Driven Third-Party Cyber Assurance Analyst

Colonial First State; Sydney; On-site; AUD 110,000 - 170,000; Full time

Benefits offered by this job

Additional day for your birthday

Access to CFS Employer Super

Life Leave - 3 days per annum

Access to Sonder who provides human‑or

Access to Corporate rates with BUPA

Confidential coaching and counselling

Job summary

Colonial First State is seeking a Cyber Assurance Analyst, Third Party Security to join the Cyber Governance, Controls and Training team in Sydney. You will support assurance activities across supplier lifecycles, review evidence, and collaborate with stakeholders to manage cyber risks while leveraging AI tools to enhance efficiency.

The role involves reporting, metrics, and maintaining audit-ready records, with a focus on regulatory obligations and safe business growth.

Responsibilities

• Support and coordinate cyber assurance activities across the supplier lifecycle, including onboarding, ongoing oversight, material change assessments and contract renewals.
• Review supplier information and supporting evidence to identify potential cyber risks, gaps, inconsistencies and matters requiring further investigation.
• Contribute practical, risk-based recommendations that support informed business and risk decisions.
• Partner with business stakeholders to identify, manage and remediate supplier-related cyber risks.
• Monitor supplier security posture and identify changes or indicators requiring review.
• Prepare reporting, metrics and insights for governance forums, risk management activities and regulatory obligations.
• Use approved AI tools to improve assessment efficiency, evidence analysis, reporting and monitoring activities.
• Contribute to improvements in third-party cyber assurance processes, templates, guidance and tools.
• Maintain accurate, complete and audit-defensible assessment and assurance records.

Job description

Colonial First State is seeking a Cyber Assurance Analyst, Third Party Security to join the Cyber Governance, Controls and Training team in Sydney. You will support assurance activities across supplier lifecycles, review evidence, and collaborate with stakeholders to manage cyber risks while leveraging AI tools to enhance efficiency.

The role involves reporting, metrics, and maintaining audit-ready records, with a focus on regulatory obligations and safe business growth.