Vendor Security & Third-Party Risk Analyst

Bupa Australia; Melbourne; On-site; AUD 90,000 - 140,000; Full time

Job summary

Bupa Australia in Melbourne is seeking a Third-Party Security Analyst to partner with project teams, assessing vendor security and helping ensure controls are in place. You’ll carry out due diligence, evaluate supplier security maturity, and report risk findings to stakeholders.

If you have 2–4 years in information security and knowledge of ISO-27000, SABSA, CISSP and NIST, you’ll fit into a purpose-driven team, with opportunities to grow and contribute to safer vendor ecosystems.

Qualifications

• 2–4 years’ experience in information security or related field.
• Tertiary qualification in Information Technology or equivalent.
• Knowledge of ISO-27000 series, SABSA, CISSP and NIST.
• Experience in APRA and/or PCI regulated industry preferred; strong business focus.
• Excellent written and spoken communication; team player; vendor management experience.

Responsibilities

• Carry out third party security due diligence assessments prior to contractual agreements.
• Assess security maturity through triage and questionnaires; evaluate controls design.
• Communicate findings within a risk context and agree remediation with stakeholders.
• Monitor third party attack surface and raise remediation requests as needed.
• Support security testing and incident response exercises or simulations.
• Prepare reports on risk profiles, trends and improvement initiatives.
• Maintain Bupa’s third‑party assessments repository.

Skills

Info security

Security risk

Vendor mgmt

Stakeholder comms

Education

Tertiary IT qualification

Job description

Bupa Australia in Melbourne is seeking a Third-Party Security Analyst to partner with project teams, assessing vendor security and helping ensure controls are in place. You’ll carry out due diligence, evaluate supplier security maturity, and report risk findings to stakeholders.

If you have 2–4 years in information security and knowledge of ISO-27000, SABSA, CISSP and NIST, you’ll fit into a purpose-driven team, with opportunities to grow and contribute to safer vendor ecosystems.