APRA-Aligned TPRM Lead: Risk Framework & MSP Oversight

Decipher Bureau; City of Melbourne; On-site; AUD 190,000 - 195,000; Full time

Benefits offered by this job

Flexible working

Health and wellbeing support

Wellbeing days

Volunteer leave

Salary packaging options

Job summary

Decipher Bureau is seeking a leadership-level risk professional to uplift our Third Party Risk Management framework in an APRA-regulated setting, guiding a team of three risk specialists. You will iterate on the CPS 220/230 framework and oversee MSP oversight, third-party assessments and security control reviews.

You will engage senior stakeholders and drive practical risk outcomes with a focus on simplifying complex environments.

Qualifications

• Experience delivering TPRM framework uplift in APRA-regulated environment.
• Strong CPS 220/230 understanding and third-/fourth‑party risk.
• Hands-on control testing, vendor assurance and MSP oversight.
• Big bank experience highly valued.
• Ability to engage senior stakeholders and simplify complex risk.

Responsibilities

• Lead and evolve a Third Party Risk Management framework.
• Perform and oversee third-party risk assessments.
• SOC 2 reviews vs control testing.
• Onsite and remote testing at MSPs.
• Assess third-party security controls (cyber-focused).
• Drive practical framework uplift.
• Lead and coach a team of 3 risk professionals.
• Partner with the CISO, security leaders, procurement, legal and compliance.
• Support incident response planning and regulatory engagement.

Skills

TPRM uplift

APRA CPS 220/230

Vendor assurance

Control testing

MSP oversight

Stakeholder engagement

Job description

Decipher Bureau is seeking a leadership-level risk professional to uplift our Third Party Risk Management framework in an APRA-regulated setting, guiding a team of three risk specialists. You will iterate on the CPS 220/230 framework and oversee MSP oversight, third-party assessments and security control reviews.

You will engage senior stakeholders and drive practical risk outcomes with a focus on simplifying complex environments.