Senior Cyber Third-Party Risk Analyst (Hybrid)

Transport for NSW; Sydney; Hybrid; AUD 142,000 - 159,000; Full time

Job summary

Transport for NSW is seeking an experienced cyber risk professional to manage supplier security assessments and monitor third‑party risk. You will coordinate with procurement, contract managers and external suppliers to sustain risk visibility across the organisation.

You will support meeting cyber obligations, track remediation actions and drive improvements to reduce supplier‑related cyber incidents within a hybrid work model.

Qualifications

• Experience in cyber risk or GRC required.
• Exposure to third‑party and supply chain cyber risk.
• Understanding of procurement and contract management in a security context.
• Ability to analyse, summarise and clearly communicate cyber risk to non‑technical stakeholders.

Responsibilities

• Manage and coordinate supplier cyber security assessments with procurement teams and external suppliers.
• Maintain standards, registers, dashboards and reporting to show supplier risk posture.
• Support contract managers to understand cyber obligations and track risk treatments.
• Contribute to continuous improvement initiatives reducing supplier‑related cyber incidents.

Skills

Cyber risk

GRC

Third-party risk

Procurement knowledge

Contract management

Job description

Transport for NSW is seeking an experienced cyber risk professional to manage supplier security assessments and monitor third‑party risk. You will coordinate with procurement, contract managers and external suppliers to sustain risk visibility across the organisation.

You will support meeting cyber obligations, track remediation actions and drive improvements to reduce supplier‑related cyber incidents within a hybrid work model.