Brisbane: Strategic Third-Party Risk Analyst

Peoplebank; Brisbane; On-site; AUD 110,000 - 140,000; Full time

Job summary

Peoplebank in Brisbane, Qld seeks a skilled Third Party Risk Analyst for a five-month contract to support government-aligned security assessments. You will conduct end-to-end third-party risk evaluations, tier risks, review evidence, and report findings to key stakeholders.

You will apply established risk frameworks, use UpGuard for vendor assessments, and coordinate remediation while ensuring compliance with Australian Government security standards.

Qualifications

• Experience in third-party/vendor risk assessments.
• Strong understanding of cyber risk and security controls.
• Knowledge of PSPF, ISM, ISO 27001, NIST, and Essential Eight.
• Strong stakeholder communication and reporting skills.
• Experience with assessment tools (e.g., UpGuard) and risk management.
• Understanding of privacy and data breach obligations.

Responsibilities

• Perform end-to-end third-party security risk assessments, including vendor intake, risk tiering, evidence review, analysis, and reporting.
• Apply risk classification frameworks to determine assessment scope and priorities.
• Use tools such as UpGuard to assess vendors, analyse security ratings, and identify risks.
• Prepare clear risk assessment reports and communicate findings to stakeholders and leadership.
• Coordinate remediation activities, track assessment outcomes, and monitor identified risks.
• Contribute to continuous improvement of assessment processes, templates, and methodologies.
• Ensure compliance with Australian Government security standards and frameworks.

Skills

Vendor risk assessments

Cyber risk & controls

PSPF/ISM/ISO27001/NIST

Stakeholder communication

UpGuard

Risk management

Privacy & data breach obligations

Education

Cyber security certifications (CISSP, CCSP, CISM, ISO 27001)

Tools

UpGuard

Job description

Peoplebank in Brisbane, Qld seeks a skilled Third Party Risk Analyst for a five-month contract to support government-aligned security assessments. You will conduct end-to-end third-party risk evaluations, tier risks, review evidence, and report findings to key stakeholders.

You will apply established risk frameworks, use UpGuard for vendor assessments, and coordinate remediation while ensuring compliance with Australian Government security standards.