Senior Third-Party Security Governance Lead (APAC)

Tata Consultancy Services Limited; Sydney; On-site; AUD 120,000 - 160,000; Full time

Job summary

Tata Consultancy Services Limited APAC is seeking a senior governance professional to lead third-party security risk management across offshore and onshore teams. You will translate security needs into supplier obligations, review risk documentation, and drive remediation with senior stakeholders.

Join a global IT services leader focused on sustainable technology and collaborative delivery, delivering secure, compliant outcomes for major clients in Australia and the Asia Pacific region.

Qualifications

• Strong practical experience in third-party security governance and risk management.
• Knowledge of ISO 27001, NIST CSF and SOC 2, translating security into supplier obligations.
• Ability to review questionnaires, evidence, findings and remediation plans.
• Understanding of security schedules, SLAs, audit rights and supplier obligations.
• Familiarity with banking regulatory expectations (APRA, SOCI) for information security.
• Pragmatic risk mindset to distinguish material risks from manageable issues.

Responsibilities

• Explain complex cyber security requirements clearly to stakeholders.
• Engage with business, cyber security, risk, procurement and suppliers across delivery teams.
• Tailor communication for audiences, including senior decision-makers, with clear recommendations.
• Manage expectations, priorities and timelines; keep stakeholders aligned.

Skills

Third-party security governance

Risk management

ISO 27001

NIST CSF

SOC 2

Contractual security requirements

Job description

Tata Consultancy Services Limited APAC is seeking a senior governance professional to lead third-party security risk management across offshore and onshore teams. You will translate security needs into supplier obligations, review risk documentation, and drive remediation with senior stakeholders.

Join a global IT services leader focused on sustainable technology and collaborative delivery, delivering secure, compliant outcomes for major clients in Australia and the Asia Pacific region.