Hybrid Cyber Risk Specialist - Third-Party Security

Peoplebank; Sydney; On-site; AUD 110,000 - 170,000; Full time

Benefits offered by this job

Hybrid work

5-month contract

Competitive rate

Job summary

Peoplebank is hiring a Cyber Risk Specialist (Third-Party) for a 5-month contract in Sydney with hybrid work flexibility (2-3 days onsite and 2 days WFH). The role focuses on assessing and managing security risks across a diverse vendor landscape within a cyber security team.

The candidate will conduct third-party security risk assessments, evaluate security postures against frameworks, and maintain records while collaborating with internal stakeholders and external vendors to improve risk

Qualifications

• 3–5 years’ experience in cyber risk roles.
• Experience with third-party/vendor security assessments.
• Knowledge of ISO/IEC 27001, NIST CSF; Essential Eight preferred.
• Understanding of privacy standards and regulatory requirements.

Responsibilities

• Conduct third-party security risk assessments across the vendor lifecycle with clear reports and recommendations.
• Evaluate vendor security posture using questionnaires, evidence, and risk frameworks.
• Maintain assessment records, monitor risk profiles, and track remediation activities.
• Collaborate with stakeholders and vendors to communicate findings and improve third-party risk management processes.

Skills

Vendor risk assessments

Third-party risk

ISO/IEC 27001

NIST CSF

Privacy standards

Cyber security certs

Job description

Peoplebank is hiring a Cyber Risk Specialist (Third-Party) for a 5-month contract in Sydney with hybrid work flexibility (2-3 days onsite and 2 days WFH). The role focuses on assessing and managing security risks across a diverse vendor landscape within a cyber security team.

The candidate will conduct third-party security risk assessments, evaluate security postures against frameworks, and maintain records while collaborating with internal stakeholders and external vendors to improve risk