Senior Third-Party Risk Analyst – Government (Hybrid)

Talenza; Sydney; Hybrid; AUD 120,000 - 180,000; Full time

Job summary

Talenza is seeking an experienced Third Party Risk Analyst to support its Federal Government client in Sydney. The role focuses on coordinating vendor risk assessments, reviewing security and privacy documentation, and monitoring third-party risks across the supplier lifecycle.

You will collaborate with procurement, security, legal and privacy teams to ensure compliance with PSPF/ISM, NIST and ISO 27001 standards, and you must have or be eligible for NV1 clearance.

Qualifications

• 5+ years in Third Party Risk Management or related fields.
• Experience with vendor risk assessments and due diligence.
• Knowledge of PSPF, ISM, Home Affairs FOCI guidance.
• Familiarity with NIST CSF and ISO 27001.
• Certifications such as CRISC, CISA, CompTIA Security+ are desirable.

Responsibilities

• Conduct third-party risk assessments across new procurements, contract renewals and existing supplier arrangements.
• Assess supplier risks relating to information security, privacy, operational resilience, AI and FOCI.
• Review supplier responses, supporting documentation, certifications, audit reports and security artefacts to identify risks and control gaps.
• Coordinate assessment activities from initiation through to completion, ensuring evidence and audit trails are maintained.
• Prepare risk assessment reports, findings summaries and recommendations for stakeholder review.
• Liaise with suppliers to obtain assessment responses and clarifications of risks.
• Administer vendor assessment questionnaires and support ongoing assessment workflows.
• Support vendor onboarding, classification and ongoing monitoring activities.
• Maintain vendor registers, assessment schedules, monitoring requirements and risk documentation.
• Monitor supplier security ratings, threat intelligence alerts and emerging risks, escalating material concerns.
• Facilitate stakeholder workshops and engagement activities for risk governance.
• Support supplier incident investigations and remediation activities.
• Contribute to ongoing improvement of third-party risk frameworks and governance artefacts.

Skills

Third Party Risk Management

Vendor risk assessments

Security and privacy governance

ISMS/PSPF awareness

Analytical/investigative skills

Stakeholder management

NV1 Clearance

Tools

NIST CSF

ISO 27001

NIST AI RMF

Job description

Talenza is seeking an experienced Third Party Risk Analyst to support its Federal Government client in Sydney. The role focuses on coordinating vendor risk assessments, reviewing security and privacy documentation, and monitoring third-party risks across the supplier lifecycle.

You will collaborate with procurement, security, legal and privacy teams to ensure compliance with PSPF/ISM, NIST and ISO 27001 standards, and you must have or be eligible for NV1 clearance.