- 2 month initial contract , with strong potential for extension
- Hybrid role based in Central Sydney
Data#3 is seeking an experienced Cyber Security Governance & Risk Analyst to join a large, complex organisation on a contract basis. The role focuses on third-party risk management (TPRM) and supporting operational cyber security risk management.
This is a great opportunity for a proactive analyst who can take ownership of assessments, run with tasks independently and bring fresh ideas on how technology, automation and AI can improve the way risk work gets done.
Key responsibilities
- Conduct cyber security risk assessments of third-party vendors, reviewing security information and supporting evidence to identify control gaps and risks
- Document, assess and prioritise third-party risks in the risk register
- Maintain the cyber risk register, socialise risks with relevant teams and coordinate risk treatment and policy compliance activities
- Communicate findings and recommendations clearly to technical and non-technical stakeholders
- Negotiate remediation actions with vendors and internal stakeholders, and follow up to ensure completion within agreed timeframes
- Work with business owners, technology teams and vendors to gather information, resolve issues and support informed risk decisions
- Maintain accurate assessment records and provide clear status updates on outstanding risks and remediation
- Help uplift and automate existing processes using tools such as UpGuard, ChatGPT, Copilot Studio and Power BI
Essential skills and experience
- At least 2 years’ experience in cyber security risk, governance, compliance or third-party risk management within a complex organisation
- Hands-on experience conducting cyber security assessments of vendors or service providers
- Sound understanding of cyber security principles, risk management practices and security controls
- Robust analytical skills, with the ability to translate technical findings into clear business risk statements and practical recommendations
- Confident stakeholder engagement, negotiation and influencing skills, including working directly with vendors
- Ability to work independently, manage multiple assessments and proactively chase outstanding actions
Desirable experience
- Experience with AI and automation tools, process automation or optimisation
- Worked with established TPRM processes, vendor security questionnaires and risk registers, including UpGuard
Interested candidates that meet the required skillset of the role are encouraged to apply via the link with an updated resume. Reference 114651