Senior Cyber Third Party Risk Analyst

Transport for NSW; Sydney; Hybrid; AUD 142,000 - 159,000; Full time

Job summary

Transport for NSW invites an experienced Senior Cyber Third Party Risk Analyst to join our security team in Sydney area at Macquarie Park. You will manage and coordinate supplier cyber security assessments, working with procurement, contract managers, and external suppliers to identify, assess, and monitor third-party risk.

We support a hybrid working model. We expect strong GRC exposure, expertise in procurement and contract management within a security context, and the ability to translate

Qualifications

• Experience in managing supplier cyber security assessments and third-party risk.
• Knowledge of procurement processes and contract management in a security context.
• Ability to analyze and communicate cyber risk to non-technical stakeholders.

Responsibilities

• Coordinate supplier cyber security assessments with procurement and vendors.
• Maintain dashboards, registers and reporting on supplier risk posture.
• Track risk treatments and remediation actions.
• Support contract managers in meeting cyber security obligations.
• Contribute to continuous improvement to reduce supplier-related incidents.

Skills

Cyber risk

GRC

Third-party risk

Procurement knowledge

Contract management

Stakeholder communication

Job description

Select how often (in days) you would like to receive alerts

Senior Cyber Third Party Risk Analyst

Organisation/Entity: Transport For NSW

Job category: Information & Communication Technology

Job location: Macquarie Park, NSW, AU, 2113

Job reference number: 107942

Employment type: Permanent Full-Time

Salary range: $141678.0-$158677.0

You’re someone who wants to create outcomes that have a real impact on the people of NSW.

You bring structure, mitigation and education to our organisation. Our records and datasets are vast and varied. This is your opportunity to safeguard critical infrastructure, order and protect sensitive data, and defend against emerging cyber threats. You'll be part of an expert team who protect against thousands of threats every day.

In this role, you'll:

Manage and coordinate supplier cyber security assessments, working closely with procurement teams, contract managers, and external suppliers to identify, assess, and monitor third‑party cyber risk. You will maintain standards, registers, dashboards, and reporting to provide clear visibility of supplier risk posture across the organisation.

You will support contract managers in understanding and meeting cyber security obligations, track risk treatments and remediation actions, and contribute to continuous improvement initiatives that reduce exposure to supplier‑related cyber incidents. This role operates within a hybrid working model and directly contributes to protecting critical transport infrastructure.

You are an experienced cyber risk or GRC professional with strong exposure to third‑party and supply chain cyber risk. You bring a solid understanding of procurement and contract management in a security context and are skilled at analysing, summarising, and clearly communicating cyber risk to non‑technical stakeholders.

Detail‑oriented and ethically driven, you work collaboratively across internal teams and external service providers. Motivated by impact, you value the opportunity to reduce supplier‑driven cyber risk and help safeguard essential transport services relied on every day.

Who we are

Transport for NSW provides a safe, integrated, and efficient transport system. We connect people, communities and industry every day.

Our workforce is as diverse as the community we serve. If you’d like further information on our inclusion and diversity initiatives, visit Transport careers .

Applications close 11:59 PM, Wednesday 21st October 2026

For more information about this role, please contact [e-mail].

Aboriginal people and people living with disability are supported throughout the recruitment process and at work, and we encourage you to apply. Visit Supporting Aboriginal People or Supporting People with Disability for more information or speak to your talent team member to arrange any adjustments to how you interact with us.

Job Segment: Supply Chain, Cyber Security, Procurement, Risk Management, Supply, Operations, Security, Finance

Transport acknowledges the Aboriginal people of the country on which we work, their traditions, culture and a shared history and identity. We also pay our respects to Elders past and present and recognise the continued connection to country.