Tasks & Responsibilities:Lead and manage the organisation's Third-Party Risk Management capability across the supplier lifecycle.
Conduct and oversee third-party risk assessments covering security, privacy, AI, operational resilience and FOCI risks.
Design, implement and enhance third-party risk management frameworks, methodologies and governance processes.
Develop and maintain supplier assessment questionnaires, risk assessment methodologies and governance artefacts.
Partner with procurement, legal, security, privacy and risk teams to ensure robust supplier risk management practices.
Engage with suppliers to review assessment responses, gather supporting evidence and resolve identified risk concerns.
Identify, assess and manage security, privacy, concentration, geopolitical, operational resilience and supplier-related risks.
Lead the selection, implementation and ongoing management of third-party risk management platforms and monitoring capabilities.
Support supplier incident investigations, remediation activities and risk treatment plans.
Prepare governance reports, executive briefings and risk papers for senior stakeholders and governance forums.
Drive continuous improvement initiatives across third-party risk management processes, controls and reporting.
Develop guidance materials, playbooks and awareness initiatives to improve third-party risk capability across the organisation.
Monitor emerging regulatory requirements, industry trends and evolving threats impacting supplier risk management.
Support the governance and assessment of AI-related supplier risks and third-party technology adoption.
Experience & Skills Required:15+ years' experience across Third Party Risk Management, Technology Risk, Security Risk, Governance, Risk and Compliance (GRC) or related disciplines.
Strong understanding of supplier risk management across due diligence, contracting, onboarding, monitoring, incident management, renewal and offboarding activities.
Experience conducting supplier security assessments and reviewing evidence relating to privacy, resilience, security controls and data management practices.
Strong knowledge of Australian Government security frameworks and industry standards including PSPF, ISM, ISO 27001 and NIST frameworks.
Experience facilitating cross-functional risk assessments and engaging with executive-level stakeholders.
Strong stakeholder management, negotiation and influencing skills across business, risk, legal and technology functions.
Demonstrated ability to develop executive reporting, governance papers, risk assessments and decision records.
Strong analytical, problem-solving and risk management capabilities within complex and highly regulated environments.
Experience balancing commercial objectives with regulatory, security and operational risk requirements.
Responsibilities
Tasks & Responsibilities:Lead and manage the organisation's Third-Party Risk Management capability across the supplier lifecycle.
Conduct and oversee third-party risk assessments covering security, privacy, AI, operational resilience and FOCI risks.
Design, implement and enhance third-party risk management frameworks, methodologies and governance processes.
Develop and maintain supplier assessment questionnaires, risk assessment methodologies and governance artefacts.
Partner with procurement, legal, security, privacy and risk teams to ensure robust supplier risk management practices.
Engage with suppliers to review assessment responses, gather supporting evidence and resolve identified risk concerns.
Identify, assess and manage security, privacy, concentration, geopolitical, operational resilience and supplier-related risks.
Lead the selection, implementation and ongoing management of third-party risk management platforms and monitoring capabilities.
Support supplier incident investigations, remediation activities and risk treatment plans.
Prepare governance reports, executive briefings and risk papers for senior stakeholders and governance forums.
Drive continuous improvement initiatives across third-party risk management processes, controls and reporting.
Develop guidance materials, playbooks and awareness initiatives to improve third-party risk capability across the organisation.
Monitor emerging regulatory requirements, industry trends and evolving threats impacting supplier risk management.
Support the governance and assessment of AI-related supplier risks and third-party technology adoption.
Experience & Skills Required:15+ years' experience across Third Party Risk Management, Technology Risk, Security Risk, Governance, Risk and Compliance (GRC) or related disciplines.
Strong understanding of supplier risk management across due diligence, contracting, onboarding, monitoring, incident management, renewal and offboarding activities.
Experience conducting supplier security assessments and reviewing evidence relating to privacy, resilience, security controls and data management practices.
Strong knowledge of Australian Government security frameworks and industry standards including PSPF, ISM, ISO 27001 and NIST frameworks.
Experience facilitating cross-functional risk assessments and engaging with executive-level stakeholders.
Strong stakeholder management, negotiation and influencing skills across business, risk, legal and technology functions.
Demonstrated ability to develop executive reporting, governance papers, risk assessments and decision records.
Strong analytical, problem-solving and risk management capabilities within complex and highly regulated environments.
Experience balancing commercial objectives with regulatory, security and operational risk requirements.
Linked-in
Google