GRC Analyst: Vendor Risk & Compliance (Hybrid)

Mission Australia; Sydney; Hybride; AUD 99 000 - 121 000; Plein temps

Avantages offerts par ce poste

Hybrid work options

Not-for-profit salary packaging

Free confidential counselling

Volunteering opportunities

Extra leave

Résumé du poste

Mission Australia is seeking an Information Security Governance, Risk & Compliance professional to strengthen cyber security, risk and vendor risk management across the organisation. The role collaborates with procurement, legal and technology teams to embed practical security controls and enable risk-based decision making.

You will drive third-party security assessments, maintain risk registers, support due diligence for vendors and monitor compliance.

Qualifications

• Experience in GRC, cyber security, or risk/compliance (3+ years preferred).
• Exposure to third-party or vendor risk management is highly desirable.
• Strong stakeholder engagement and clear communication skills.
• Ability to translate technical risks into business language.
• Proactive mindset with attention to detail and rigor.

Responsabilités

• Perform security assessments for vendors using a risk-based approach.
• Maintain and uplift the third-party risk register and processes.
• Support due diligence for new vendors and contract renewals.
• Monitor vendor compliance with security and privacy requirements.
• Contribute to transition toward continuous vendor monitoring.
• Partner with procurement, legal, and business teams to embed security practices.
• Provide guidance on managing vendor risk and reporting to leadership.

Connaissances

GRC experience

Cyber security

Vendor risk

Stakeholder engagement

Communication

Attention to detail

Description du poste

Mission Australia is seeking an Information Security Governance, Risk & Compliance professional to strengthen cyber security, risk and vendor risk management across the organisation. The role collaborates with procurement, legal and technology teams to embed practical security controls and enable risk-based decision making.

You will drive third-party security assessments, maintain risk registers, support due diligence for vendors and monitor compliance.