Third Party Risk Analyst

Peoplebank; City of Brisbane; On-site; AUD 110,000 - 140,000; Full time

Job summary

Peoplebank in Brisbane, Qld seeks a skilled Third Party Risk Analyst for a five-month contract to support government-aligned security assessments. You will conduct end-to-end third-party risk evaluations, tier risks, review evidence, and report findings to key stakeholders.

You will apply established risk frameworks, use UpGuard for vendor assessments, and coordinate remediation while ensuring compliance with Australian Government security standards.

Qualifications

• Experience in third-party/vendor risk assessments.
• Strong understanding of cyber risk and security controls.
• Knowledge of PSPF, ISM, ISO 27001, NIST, and Essential Eight.
• Strong stakeholder communication and reporting skills.
• Experience with assessment tools (e.g., UpGuard) and risk management.
• Understanding of privacy and data breach obligations.

Responsibilities

• Perform end-to-end third-party security risk assessments, including vendor intake, risk tiering, evidence review, analysis, and reporting.
• Apply risk classification frameworks to determine assessment scope and priorities.
• Use tools such as UpGuard to assess vendors, analyse security ratings, and identify risks.
• Prepare clear risk assessment reports and communicate findings to stakeholders and leadership.
• Coordinate remediation activities, track assessment outcomes, and monitor identified risks.
• Contribute to continuous improvement of assessment processes, templates, and methodologies.
• Ensure compliance with Australian Government security standards and frameworks.

Skills

Vendor risk assessments

Cyber risk & controls

PSPF/ISM/ISO27001/NIST

Stakeholder communication

UpGuard

Risk management

Privacy & data breach obligations

Education

Cyber security certifications (CISSP, CCSP, CISM, ISO 27001)

Tools

UpGuard

Job description

Role: Third Party Risk Analyst
Initial 5 Month contract
Location: Brisbane, Qld
*Must be able to obtain Baseline

As the selected candidate, you will:

• Perform end-to-end third-party security risk assessments, including vendor intake, risk tiering, evidence review, analysis, and reporting.
• Apply risk classification frameworks to determine assessment scope and priorities.
• Use tools such as UpGuard to assess vendors, analyse security ratings, and identify risks.
• Prepare clear risk assessment reports and communicate findings to stakeholders and leadership.
• Coordinate remediation activities, track assessment outcomes, and monitor identified risks.
• Contribute to continuous improvement of assessment processes, templates, and methodologies.
• Ensure compliance with Australian Government security standards and frameworks.

Role: Third Party Risk Analyst
Initial 5 Month contract
Location: Brisbane, Qld
*Must be able to obtain Baseline

As the selected candidate, you will:

• Perform end-to-end third-party security risk assessments, including vendor intake, risk tiering, evidence review, analysis, and reporting.
• Apply risk classification frameworks to determine assessment scope and priorities.
• Use tools such as UpGuard to assess vendors, analyse security ratings, and identify risks.
• Prepare clear risk assessment reports and communicate findings to stakeholders and leadership.
• Coordinate remediation activities, track assessment outcomes, and monitor identified risks.
• Contribute to continuous improvement of assessment processes, templates, and methodologies.
• Ensure compliance with Australian Government security standards and frameworks.

To be successful in this role you should have:

• Experience in third-party/vendor risk assessments.
• Strong understanding of cyber risk and security controls.
• Knowledge of PSPF, ISM, ISO 27001, NIST, and Essential Eight.
• Strong stakeholder communication and reporting skills.
• Experience with assessment tools (e.g., UpGuard) and risk management.
• Relevant cyber security certifications (CISSP, CCSP, CISM, ISO 27001).
• Understanding of privacy and data breach obligations.

Peoplebank and Leaders IT are committed to creating a diverse and inclusive workplace where everyone belongs. We welcome applications from people of all backgrounds, identities, and experiences. If you need adjustments to the recruitment process due to your circumstances, please let us know—we’re here to support you.