Senior Cyber Third Party Risk Analyst

Transport for NSW; Sydney; Hybrid; AUD 142,000 - 159,000; Full time

Job summary

Transport for NSW is seeking an experienced cyber risk professional to manage supplier security assessments and monitor third‑party risk. You will coordinate with procurement, contract managers and external suppliers to sustain risk visibility across the organisation.

You will support meeting cyber obligations, track remediation actions and drive improvements to reduce supplier‑related cyber incidents within a hybrid work model.

Qualifications

• Experience in cyber risk or GRC required.
• Exposure to third‑party and supply chain cyber risk.
• Understanding of procurement and contract management in a security context.
• Ability to analyse, summarise and clearly communicate cyber risk to non‑technical stakeholders.

Responsibilities

• Manage and coordinate supplier cyber security assessments with procurement teams and external suppliers.
• Maintain standards, registers, dashboards and reporting to show supplier risk posture.
• Support contract managers to understand cyber obligations and track risk treatments.
• Contribute to continuous improvement initiatives reducing supplier‑related cyber incidents.

Skills

Cyber risk

GRC

Third-party risk

Procurement knowledge

Contract management

Job description

Job category:Information & Communication Technology

Job location: Macquarie Park, NSW, AU, 2113

Job reference number:107942

Employment type:Permanent Full-Time

Salary range:$141678.0-$158677.0

You’re someone who wants to create outcomes that have a real impact on the people of NSW.

You bring structure, mitigation and education to our organisation. Our records and datasets are vast and varied. This is your opportunity to safeguard critical infrastructure, order and protect sensitive data, and defend against emerging cyber threats. You'll be part of an expert team who protect against thousands of threats every day.

In this role, you'll:

Manage and coordinate supplier cyber security assessments, working closely with procurement teams, contract managers, and external suppliers to identify, assess, and monitor third‑party cyber risk. You will maintain standards, registers, dashboards, and reporting to provide clear visibility of supplier risk posture across the organisation.

You will support contract managers in understanding and meeting cyber security obligations, track risk treatments and remediation actions, and contribute to continuous improvement initiatives that reduce exposure to supplier‑related cyber incidents. This role operates within a hybrid working model and directly contributes to protecting critical transport infrastructure.

About you

You are an experienced cyber risk or GRC professional with strong exposure to third‑party and supply chain cyber risk. You bring a solid understanding of procurement and contract management in a security context and are skilled at analysing, summarising, and clearly communicating cyber risk to non‑technical stakeholders.

Detail‑oriented and ethically driven, you work collaboratively across internal teams and external service providers. Motivated by impact, you value the opportunity to reduce supplier‑driven cyber risk and help safeguard essential transport services relied on every day.

Who we are

Transport for NSW provides a safe, integrated, and efficient transport system. We connect people, communities and industry every day.

Our workforce is as diverse as the community we serve.

Flexible work optionsmay be available.

Applications close 11:59 PM, Wednesday 21st October 2026

Aboriginal people and people living with disability are supported throughout the recruitment process and at work, and we encourage you to apply.

or speak to your talent team member to arrange any adjustments to how you interact with us.

#LI-Hybrid

Job Segment

• Risk Management
• Cyber Security
• Contract Manager
• Supply Chain
• Procurement
• Finance
• Security
• Legal
• Operations