Job Description
n
This is a leadership role with an existing team and framework in place. The focus is on uplifting, streamlining and simplifying third-party risk practices (not building from scratch).
Key benefits n
n
Flexible ways of working,
focus on outcomes, not location
n
Health & wellbeing support
, including access to digital health services and wellbeing programs
n
Subsidised private health insurance
(for eligible employees)
n
Additional leave options
, including wellbeing days and family-focused leave
n
Community & giving programs
, including paid volunteering time
n
Salary packaging options
, including super and novated leasing
n
What you'll be doing n
n
Lead and evolve a
Third Party Risk Management (TPRM) framework
aligned to
APRA CPS 220 / CPS 230
n
Perform and oversee
third‐party risk assessments
, including:
n
SOC 2 reviews vs control testing
n
Onsite and remote testing at
Managed Service Providers (MSPs)
n
Assess
third‐party security controls
(cyber‐focused, not just paper‐based)
n
Drive
practical framework uplift
, applying the spirit of regulation, not just ticking sections
n
Lead and coach a team of 3 risk professionals
n
Partner closely with the
CISO, security leaders, procurement, legal and compliance
n
Support incident response planning and regulatory engagement where required
n




What they're looking for n
n
Proven experience delivering
TPRM framework uplift or implementation
in an
APRA‐regulated workplace
n
Strong understanding of
CPS 220 / CPS 230
and third‐party / fourth‐party risk
n
Hands‐on experience with
control testing
, vendor assurance and MSP oversight
n
Big bank experience highly valued
(e.g. Westpac, CBA or similar)
n
Confident engaging senior stakeholders and simplifying complex risk environments
n
Why this role? n
n
Established team, real mandate to improve
n
High‐impact role with strong executive visibility
n
Focus on
practical risk outcomes
, not bureaucracy
n
Flexible ways of working,
focus on outcomes, not location
n
Health & wellbeing support
, including access to digital health services and wellbeing programs
n
Subsidised private health insurance
(for eligible employees)
n
Additional leave options
, including wellbeing days and family‐focused leave
n
Community & giving programs
, including paid volunteering time
n
Salary packaging options
, including super and novated leasing
n
Additional information n
n
Melbourne preferred | Sydney considered
n
$190k-$195k package (inc. super)
n
Full working rights in AU required (No sponsorship available)
n
n
#J-*****-Ljbffr

📌 Third Party Risk Advisory Manager (Victoria)
🏢 Decipher Bureau
📍 Victoria