Senior Cyber Third-Party Risk Analyst — Hybrid

Transport for NSW; Sydney; Hybrid; AUD 142,000 - 159,000; Full time

Job summary

Transport for NSW invites an experienced Senior Cyber Third Party Risk Analyst to join our security team in Sydney area at Macquarie Park. You will manage and coordinate supplier cyber security assessments, working with procurement, contract managers, and external suppliers to identify, assess, and monitor third-party risk.

We support a hybrid working model. We expect strong GRC exposure, expertise in procurement and contract management within a security context, and the ability to translate

Qualifications

• Experience in managing supplier cyber security assessments and third-party risk.
• Knowledge of procurement processes and contract management in a security context.
• Ability to analyze and communicate cyber risk to non-technical stakeholders.

Responsibilities

• Coordinate supplier cyber security assessments with procurement and vendors.
• Maintain dashboards, registers and reporting on supplier risk posture.
• Track risk treatments and remediation actions.
• Support contract managers in meeting cyber security obligations.
• Contribute to continuous improvement to reduce supplier-related incidents.

Skills

Cyber risk

GRC

Third-party risk

Procurement knowledge

Contract management

Stakeholder communication

Job description

Transport for NSW invites an experienced Senior Cyber Third Party Risk Analyst to join our security team in Sydney area at Macquarie Park. You will manage and coordinate supplier cyber security assessments, working with procurement, contract managers, and external suppliers to identify, assess, and monitor third-party risk.

We support a hybrid working model. We expect strong GRC exposure, expertise in procurement and contract management within a security context, and the ability to translate