The Third-party Risk Adviser is a security practitioner in the Security Risk, Threat and Assessment team. Reporting to the Security Risk Lead, the role supports the Bureau to identify and address security risks associated with third parties throughout the third-party relationship lifecycle. Third parties may include partners, consultants, vendors, service providers and suppliers engaged through procurement, outsourcing, contracts, partnerships and collaborations, including academic collaborations. The role conducts recent, periodic and event-driven third-party security risk assessments, including vendor and supply chain risk assessments and Foreign Ownership, Control or Influence (FOCI) risk assessments. It analyses jurisdictional, governance, privacy and protective security risks; assesses the source,



reliability and integrity of providers and supply chains; and provides evidence-based advice on whether identified risks can be treated to an acceptable level. The adviser works with procurement teams, contract managers, business owners, project and program areas, researchers, ICT, Legal and other security stakeholders to embed proportionate security requirements into procurement and contractual arrangements. The role maintains the third-party risk management register and monitors security treatments, contractual security obligations, provider compliance and reassessment triggers across the life of an arrangement, including completion or termination.

📌 Third-party Risk Adviser (Hobart)
🏢 Bureau Of Meteorology
📍 Hobart