Strategic Supplier Security Risk Analyst

South East Water; Melbourne; On-site; AUD 119,000 - 126,000; Full time

Benefits offered by this job

My Fitness Passport

Flexible working

Leave options (cultural and study)

Job summary

South East Water is seeking a Supplier Security Assurance Analyst to shape the organisation’s approach to third‑party security. You will conduct risk-based assessments of suppliers, identify control gaps, and strengthen the supplier security posture to protect critical systems and services.

You’ll work with Procurement, Legal and business teams to evaluate supplier dependencies, manage remediation, and embed security requirements into contracts while driving uplift across the risk program and

Qualifications

• 5+ years of information risk, third‑party risk or security assurance roles.
• Experience conducting supplier security assessments, evaluating controls and remediation management.
• Hands-on with third‑party risk platforms (UpGuard, SecurityScorecard, BitSight or similar).
• Knowledge of frameworks such as NIST CSF, ISO 27001, VPDSS, ASD ISM or CIS.
• Understanding security controls across IT, OT, Cloud, SaaS and Managed Services.

Responsibilities

• Shape SEW's third-party security approach and assess supplier security posture.
• Assess supplier dependencies and controls across IT/OT/enterprise environments; recommend risk treatments.
• Embed security requirements into contracts and drive remediation with suppliers.
• Enhance the third‑party risk program and contribute to policy improvements.

Skills

Information risk

Third-party risk

Supplier security

NIST/ISO frameworks

Contract security

Security controls

Tools

UpGuard

SecurityScorecard

BitSight

Job description

South East Water is seeking a Supplier Security Assurance Analyst to shape the organisation’s approach to third‑party security. You will conduct risk-based assessments of suppliers, identify control gaps, and strengthen the supplier security posture to protect critical systems and services.

You’ll work with Procurement, Legal and business teams to evaluate supplier dependencies, manage remediation, and embed security requirements into contracts while driving uplift across the risk program and