This is a leadership role with an existing team and framework in place.
The focus is on uplifting, streamlining and simplifying third-party risk practices (not building from scratch).
Key benefits
Flexible ways of working,focus on outcomes, not location
Health & wellbeing support, including access to digital health services and wellbeing programs
Subsidised private health insurance(for eligible employees)
Additional leave options, including wellbeing days and family-focused leave
Community & giving programs, including paid volunteering time
Salary packaging options, including super and novated leasing
What you'll be doing
Lead and evolve aThird Party Risk Management (TPRM) frameworkaligned toAPRA CPS 220 / CPS 230
Perform and overseethird‐party risk assessments, including:
SOC 2 reviews vs control testing
Onsite and remote testing atManaged Service Providers (MSPs)
Assessthird‐party security controls(cyber‐focused, not just paper‐based)
Drivepractical framework uplift, applying the spirit of regulation, not just ticking sections
Lead and coach a team of 3 risk professionals
Partner closely with theCISO, security leaders, procurement, legal and compliance
Support incident response planning and regulatory engagement where required
What they're looking for




Proven experience deliveringTPRM framework uplift or implementationin anAPRA‐regulated environment
Strong understanding ofCPS 220 / CPS 230and third‐party / fourth‐party risk
Hands‐on experience withcontrol testing, vendor assurance and MSP oversight
Big bank experience highly valued(e.g. Westpac, CBA or similar)
Confident engaging senior stakeholders and simplifying complex risk environments
Why this role?
Established team, real mandate to improve
High‐impact role with solid executive visibility
Focus onpractical risk outcomes, not bureaucracy
Flexible ways of working,focus on outcomes, not location
Health & wellbeing support, including access to digital health services and wellbeing programs
Subsidised private health insurance(for eligible employees)
Additional leave options, including wellbeing days and family‐focused leave
Community & giving programs, including paid volunteering time
Salary packaging options, including super and novated leasing
Additional information
Melbourne preferred | Sydney considered
$190k-$195k package (inc. super)
Full working rights in AU required (No sponsorship available)
#J-*****-Ljbffr

📌 Third Party Risk Advisory Manager (Melbourne)
🏢 Decipher Bureau
📍 Melbourne