Senior Third-Party Security Assurance Analyst

South East Water Corporation; Frankston; Hybrid; AUD 119,000 - 126,000; Full time

Benefits offered by this job

Hybrid work options

Employee Assistance Program

My Fitness Passport

Health checks

Cultural and ceremonial leave

Study leave

On-site cafe and parking

Job summary

South East Water is seeking a Supplier Security Assurance Analyst to shape our approach to third‑party security. You will conduct risk‑based supplier assessments, identify control gaps and drive remediation across IT, OT and cloud environments, partnering with Procurement, Legal and business teams to embed security requirements into contracts.

We value hands‑on risk professionals with practical experience in supplier security, familiar with platforms like UpGuard, SecurityScorecard or BitSight,

Qualifications

• 5+ years’ experience in information risk, third‑party risk or security assurance roles.
• Practical experience conducting supplier security assessments and remediation.
• Hands‑on with third‑party risk platforms such as UpGuard, SecurityScorecard, BitSight or similar.
• Knowledge of frameworks such as NIST CSF, ISO 27001, VPDSS, ASD ISM or CIS.
• Understanding of security controls across IT, OT, Cloud, SaaS and Managed Services environments.

Responsibilities

• Conduct practical, risk‑based security assessments of suppliers.
• Identify control gaps and strengthen supplier security posture.
• Embed security requirements into contracts and track remediation.
• Collaborate with Procurement, Legal and business teams.
• Drive continuous uplift of the third‑party risk management program.

Skills

5+ years in information risk

Supplier security assessments

Remediation management

NIST CSF / ISO 27001 familiarity

Strong analytical & communication

Stakeholder engagement

Education

CISSP or CTPRP or CTPRA or CRISC or ISO 27001

Tools

UpGuard

SecurityScorecard

BitSight

Job description

South East Water is seeking a Supplier Security Assurance Analyst to shape our approach to third‑party security. You will conduct risk‑based supplier assessments, identify control gaps and drive remediation across IT, OT and cloud environments, partnering with Procurement, Legal and business teams to embed security requirements into contracts.

We value hands‑on risk professionals with practical experience in supplier security, familiar with platforms like UpGuard, SecurityScorecard or BitSight,