Cyber Risk Specialist

Peoplebank; Sydney; Hybrid; AUD 110,000 - 170,000; Full time

Benefits offered by this job

Hybrid work

5-month contract

Competitive rate

Job summary

Peoplebank is hiring a Cyber Risk Specialist (Third-Party) for a 5-month contract in Sydney with hybrid work flexibility (2-3 days onsite and 2 days WFH). The role focuses on assessing and managing security risks across a diverse vendor landscape within a cyber security team.

The candidate will conduct third-party security risk assessments, evaluate security postures against frameworks, and maintain records while collaborating with internal stakeholders and external vendors to improve risk

Qualifications

• 3–5 years’ experience in cyber risk roles.
• Experience with third-party/vendor security assessments.
• Knowledge of ISO/IEC 27001, NIST CSF; Essential Eight preferred.
• Understanding of privacy standards and regulatory requirements.

Responsibilities

• Conduct third-party security risk assessments across the vendor lifecycle with clear reports and recommendations.
• Evaluate vendor security posture using questionnaires, evidence, and risk frameworks.
• Maintain assessment records, monitor risk profiles, and track remediation activities.
• Collaborate with stakeholders and vendors to communicate findings and improve third-party risk management processes.

Skills

Vendor risk assessments

Third-party risk

ISO/IEC 27001

NIST CSF

Privacy standards

Cyber security certs

Job description

Cyber Risk Specialist – Federal Sector
5-month Contract
Competitive Rate
Sydney based with hybrid work flexibility (2-3 days onsite and 2 days WFH)

We are seeking a skilled Cyber Risk Specialist (Third-Party) to play a critical role in protecting the organisation by assessing and managing security risks across a diverse vendor landscape. This is an excellent opportunity to work with key stakeholders, influence risk-based decisions, and help strengthen third-party risk management practices within a collaborative cyber security team.

Responsibilities

• Conduct third-party security risk assessments across the vendor lifecycle, including intake, risk tiering, evidence review, security analysis, and the delivery of clear risk assessment reports with actionable recommendations.
• Evaluate vendor security posture using questionnaires, supporting documentation, security ratings, and risk frameworks to identify, assess, and communicate information security risks and appropriate treatment actions.
• Maintain assessment records, monitor vendor risk profiles, support ongoing reassessments, track risks, issues, and remediation activities through governance and risk management tools.
• Collaborate with internal stakeholders and external vendors to gather information, communicate security findings to technical and non-technical audiences, and contribute to the continuous improvement of third-party risk management processes, methodologies, and documentation.

Required Skills

• 3-5 years’ experience as Cyber Risk Specialist or similar capacity
• Demonstrated experience conducting third-party, vendor or supplier security risk assessments
• Working knowledge of ISO/IEC 27001, NIST CSF and Essential Eight is preferred
• Working knowledge of Privacy Standards
• Relevant cyber security certification is a plus

Due to work rights requirement for this role, candidate must be Australian Citizen.

Peoplebank and Leaders IT are committed to creating a diverse and inclusive workplace where everyone belongs. We welcome applications from people of all backgrounds, identities, and experiences. If you need adjustments to the recruitment process due to your circumstances, please let us know—we’re here to support you.