Supplier Governance Manager

Supplier Governance Manager Third Party Risk | Supplier Governance | CPS 230 | Technology & AI Risk

An opportunity exists for an experienced Supplier Governance Manager to lead supplier governance, third-party risk management, and CPS 230 compliance activities within a highly regulated environment.

This role will focus on overseeing critical supplier risks, strengthening governance frameworks, managing technology and AI-related third-party risks, and supporting ongoing regulatory compliance obligations. The successful candidate will play a key role in enhancing supplier oversight, risk reporting, and governance practices across the organisation.

Key Responsibilities

• Lead supplier governance and third-party risk activities across critical technology, cloud, and AI suppliers.
• Ensure supplier risk frameworks, controls, and governance processes align with APRA CPS 230 requirements.
• Assess and manage emerging supplier risks, including AI-related risks, concentration risk, and outsourced service provider dependencies.
• Develop, enhance, and monitor supplier risk reporting, key risk indicators (KRIs), and governance metrics.
• Conduct supplier risk assessments, due diligence reviews, and ongoing monitoring activities.
• Partner closely with Risk, Technology, Procurement, Legal, and Business teams to strengthen supplier governance and oversight.
• Support contract reviews and supplier management practices to ensure regulatory and operational risk requirements are met.
• Prepare reporting and insights for senior leadership and governance committees.

About You- You will bring strong experience within supplier governance, third-party risk, operational risk, or vendor management, ideally gained within a regulated environment such as banking, financial services, insurance, or other highly regulated industries.

Key Experience

• Strong experience in Supplier Governance, Vendor Management, Third Party Risk Management, Operational Risk, or Outsourcing Risk.
• Experience working within APRA-regulated or highly regulated environments.
• Strong knowledge of APRA CPS 230 and third-party risk management frameworks.
• Experience assessing critical suppliers, outsourced service providers, and technology vendors.
• Understanding of technology, cybersecurity, cloud, data, and AI-related supplier risks.
• Experience developing risk frameworks, controls, governance processes, KRIs, and management reporting.
• Ability to influence and engage senior stakeholders across business and risk functions.
• Experience presenting to executive leadership teams, risk forums, or governance committees.

Suitable Backgrounds We recognise that strong candidates may come from a variety of titles, including:

• Third Party Risk Manager
• Supplier Risk & Governance Manager
• Manager, Third Party Risk & Governance
• Vendor Risk Manager (Technology & AI)
• Outsourcing Risk Manager
• Supplier Assurance Manager
• Operational Risk Manager (Third Party Risk)
• Technology Vendor Risk Manager

If you have experience managing supplier risk, governance, outsourcing, or technology vendor oversight within a regulated environment, we encourage you to apply.
















Peoplebank and Leaders IT are committed to creating a diverse and inclusive workplace where everyone belongs. We welcome applications from people of all backgrounds, identities, and experiences. If you need adjustments to the recruitment process due to your circumstances, please let us know—we’re here to support you.