Sydney IT Risk Lead - Third-Party & Vendor Governance

Michael Page; Sydney; On-site; AUD 129,000 - 203,000; Full time

Job summary

Michael Page is seeking an IT Third Party Risk Manager to shape and manage risk across the organisation's vendor ecosystem from Sydney. You will assess, monitor, and mitigate risks, aligning policies with best practices and regulatory requirements.

Collaboration with executives will be key to effective risk decisions. The role focuses on developing risk management frameworks, maintaining risk registers, and delivering regular management reports.

Qualifications

• Able to lead technology risk management and third-party governance initiatives.
• Proven ability to assess and mitigate risks in IT vendor relationships.
• Experience developing and implementing risk management frameworks.
• Excellent communication and stakeholder management across levels.
• Knowledge of industry standards and regulatory requirements in risk management.
• Attention to detail and proactive risk identification approach.
• Australian citizenship with willingness to obtain security clearance

Responsibilities

• Assess and manage third-party risk within the IT framework.
• Develop and implement risk management policies and procedures.
• Monitor vendor compliance with contractual and regulatory requirements.
• Conduct risk assessments and audits of third-party providers.
• Collaborate with internal stakeholders to ensure risk mitigation.
• Maintain and update risk registers and report to senior management.
• Identify emerging risks and recommend actions to address them.
• Ensure risk processes align with industry best practices.

Skills

Technology risk management

Third-party governance

Vendor risk assessment

Risk management frameworks

Communication & stakeholder management

Industry standards knowledge

Citizenship & clearance readiness

Job description

Michael Page is seeking an IT Third Party Risk Manager to shape and manage risk across the organisation's vendor ecosystem from Sydney. You will assess, monitor, and mitigate risks, aligning policies with best practices and regulatory requirements.

Collaboration with executives will be key to effective risk decisions. The role focuses on developing risk management frameworks, maintaining risk registers, and delivering regular management reports.