Third Party Risk Analyst

Role: Third Party Risk Analyst
Initial 5 Month contract
Location: Brisbane, Qld
*Must be able to obtain Baseline

As the selected candidate, you will:

• Perform end-to-end third-party security risk assessments, including vendor intake, risk tiering, evidence review, analysis, and reporting.
• Apply risk classification frameworks to determine assessment scope and priorities.
• Use tools such as UpGuard to assess vendors, analyse security ratings, and identify risks.
• Prepare clear risk assessment reports and communicate findings to stakeholders and leadership.
• Coordinate remediation activities, track assessment outcomes, and monitor identified risks.
• Contribute to continuous improvement of assessment processes, templates, and methodologies.
• Ensure compliance with Australian Government security standards and frameworks.

To be successful in this role you should have:

• Experience in third-party/vendor risk assessments.
• Strong understanding of cyber risk and security controls.
• Knowledge of PSPF, ISM, ISO 27001, NIST, and Essential Eight.
• Strong stakeholder communication and reporting skills.
• Experience with assessment tools (e.g., UpGuard) and risk management.
• Relevant cyber security certifications (CISSP, CCSP, CISM, ISO 27001).
• Understanding of privacy and data breach obligations.

Please reach out to have a confidential chat and reference #272267- mangal.kadam@peoplebank.com.au/7 3003 7693



Peoplebank and Leaders IT are committed to creating a diverse and inclusive workplace where everyone belongs. We welcome applications from people of all backgrounds, identities, and experiences. If you need adjustments to the recruitment process due to your circumstances, please let us know—we’re here to support you.