Job Description

n

This is a leadership role with an existing team and framework in place. The focus is on uplifting, streamlining and simplifying third-party risk practices (not building from scratch).

Key benefits n

n
- Flexible ways of working, focus on outcomes, not location
n
- Health & wellbeing support , including access to digital health services and wellbeing programs
n
- Subsidised private health insurance (for eligible employees)
n
- Additional leave options , including wellbeing days and family-focused leave
n
- Community & giving programs , including paid volunteering time
n
- Salary packaging options , including super and novated leasing
n

What you'll be doing nn
- Lead and evolve a Third Party Risk Management (TPRM) framework aligned to APRA CPS 220 / CPS 230
n
- Perform and oversee third‑party risk assessments , including:
n
- SOC 2 reviews vs control testing
n
- Onsite and remote testing at Managed Service Providers (MSPs)
n
- Assess third‑party security controls (cyber‑focused, not just paper‑based)
n
- Drive practical framework uplift , applying the spirit of regulation, not just ticking sections
n
- Lead and coach a team of 3 risk professionals
n
- Partner closely with the CISO, security leaders, procurement, legal and compliance
n
- Support incident response planning and regulatory engagement where required
n





What they're looking for nn
- Proven experience delivering TPRM framework uplift or implementation in an APRA‑regulated environment
n
- Robust understanding of CPS 220 / CPS 230 and third‑party / fourth‑party risk
n
- Hands‑on experience with control testing , vendor assurance and MSP oversight
n
- Big bank experience highly valued (e.g. Westpac, CBA or similar)
n
- Confident engaging senior stakeholders and simplifying complex risk environments
n

Why this role? nn
- Established team, real mandate to improve
n
- High‑impact role with strong executive visibility
n
- Focus on practical risk outcomes , not bureaucracy
n
- Flexible ways of working, focus on outcomes, not location
n
- Health & wellbeing support , including access to digital health services and wellbeing programs
n
- Subsidised private health insurance (for eligible employees)
n
- Additional leave options , including wellbeing days and family‑focused leave
n
- Community & giving programs , including paid volunteering time
n
- Salary packaging options , including super and novated leasing
n

Additional information nn
- Melbourne preferred | Sydney considered
n
- $190k-$195k package (inc. super)
n
- Full working rights in AU required (No sponsorship available)
n

n

#J-18808-Ljbffr

📌 Third Party Risk Advisory Manager (Victoria)
🏢 Decipher Bureau
📍 Victoria