Security Risk & Compliance Analyst

Talent International; Melbourne; Hybrid; AUD 90,000 - 120,000; Part time

Benefits offered by this job

Hybrid work model

CBD location

Job summary

Talent is seeking a Security Risk & Compliance Analyst to strengthen cyber security, governance, and third-party risk management across a diverse technology landscape in Melbourne.

You will conduct risk assessments using frameworks (VPDSS, PSPF, ISM, NIST), produce SRA documentation, manage TPRM assessments, and partner with project teams to embed Security by Design while developing policies and procedures.

Qualifications

• Experience conducting cyber security risk assessments.
• Knowledge of VPDSS, PSPF, ISM, and NIST.
• Experience with TPRM, vulnerability management, and security reporting.
• Understand security for Microsoft technologies (Azure, M365, Entra ID).
• Strong stakeholder engagement to communicate risks.

Responsibilities

• Conduct security risk assessments using recognised frameworks.
• Produce documentation for Security Risk Assessments (SRA).
• Perform Third Party Risk Management (TPRM) assessments, reporting, and ongoing risk monitoring.
• Partner with project teams and solution architects to embed Security by Design principles.
• Develop and maintain cyber security policies, standards and procedures.

Skills

Cyber security risk assessments

Third Party Risk Management

Security frameworks (VPDSS, PSPF, ISM,

Azure security

Stakeholder engagement

Tools

Azure

Microsoft 365

Entra ID

Job description

• Contract Until End of June – Government Agency
• CBD Location – Hybrid working from Home
• Conduct Third-Party Risk Management (TPRM) Assessments

We are seeking a Security Risk & Compliance Analyst to work on strengthening cyber security, third-party risk management (TPRM), governance, and compliance across a diverse technology landscape.

You will be responsible for:

• Conduct security risk assessments using recognised frameworks including VPDSS, PSPF, ISM, NIST
• Produce security documentation for Security Risk Assessments (SRA),
• Perform Third Party Risk Management (TPRM) assessments, reporting, and ongoing risk monitoring
• Partner with project teams and solution architects to embed Security by Design principles
• Develop and maintain cyber security policies, standards and procedures

Key Skills and Experience

• Proven experience conducting cyber security risk assessments
• Strong knowledge of cyber security frameworks including VPDSS, PSPF, ISM, NIST
• Experience with Third Party Risk Management (TPRM), vulnerability management and security compliance reporting
• Strong understanding of Microsoft technologies from a security perspective, including Azure, Microsoft 365 and Entra ID
• Excellent stakeholder engagement skills with the ability to communicate complex security risks

Wants in it for you:

• Contract Until End of June
• CBD Location with hybrid working from Home
• Government Agency