Remote Cyber Risk Analyst – Federal Third-Party Security

Triniti

Sydney

Hybrid

AUD 129,000 - 203,000

Full time

4 days ago

Be an early applicant

Application generator

A complete application in a minute — tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

Triniti is seeking a Cyber Risk Analyst on a five-month contract to support a Federal Government agency’s Third-Party Risk Management program in Sydney. You’ll assess security risks of vendors, research partners and service providers under the Lead Cyber Risk Specialist.

Based in Australia with a work-from-home arrangement, you will review supplier questionnaires, assess controls across access, encryption, backup, vulnerability management and incident response, and produce clear findings with

Qualifications

Experience conducting third-party security risk assessments with understanding of inherent and residual risk, likelihood and treatment planning.
Ability to communicate findings clearly to technical and non-technical stakeholders, and manage multiple assessments under direction of a lead.
Familiarity with PSPF, ISM, ISO 27001, NIST CSF or Essential Eight; knowledge of privacy obligations.

Responsibilities

Review supplier questionnaires and security documentation.
Assess controls covering access management, encryption, backup and recovery, vulnerability management, penetration testing and incident response.
Identify and rate risks, produce clear assessment reports and remediation recommendations.
Work with business owners and suppliers to agree remediation owners and timeframes.
Use UpGuard to support assessments and security monitoring and maintain assessment and risk records.
Contribute to improvements in assessment processes, questionnaires and templates.