Third Party Security Manager at Commonwealth Bank

Sydney, New South Wales, Australia -

Full Time

Start Date

Immediate

Expiry Date

12 Oct, 26

Salary

0.0

Posted On

14 Jul, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cyber Security Risk Management, Third-Party Risk Management, Governance Frameworks, Supplier Onboarding, Contract Review, Security Negotiations, Stakeholder Management, Risk Assessment, Regulatory Compliance, APRA CPS 234, NIST CSF, ISO 27001, Infrastructure Security, Telecommunications Security, Application Security, Enterprise Risk Management

Industry

Financial Services

Description

Third Party Security Manager – Cyber Security Manage cyber security risk across a complex supplier ecosystem Influence how the Group secures third-party engagements Join a leading cyber team protecting customers and the community Do work that matters You will play a key role in managing cyber security risk across our third-party landscape. Working within our Cyber Security function, you will assess, advise and influence how we manage supplier risk to protect our systems, customers and communities. This role sits within the Third-Party Security team, where you’ll partner with stakeholders across the Group and externally to ensure strong governance, effective risk management and secure supplier engagement. See yourself in our team Cyber Security is responsible for safeguarding the bank, protecting our customers and ensuring we stay resilient in an evolving threat landscape. Our Third-Party Security team focuses on cyber risk associated with suppliers, ensuring risks are understood, assessed and appropriately managed. You’ll join a collaborative team environment where you’ll work alongside experienced security professionals to deliver governance outcomes across a complex and evolving supplier ecosystem. Your impact and contribution In this role, you will: Deliver third-party cyber security risk assessments across suppliers and engagements Provide expert input into supplier onboarding, contract reviews and security negotiations Identify and assess security non-compliances against internal frameworks and industry standards Partner with stakeholders to ensure effective remediation of identified risks Monitor regulatory and policy changes and provide insights on their impact Represent Cyber Security in governance forums with internal and external stakeholders Contribute to the uplift of third-party security governance frameworks Build trusted relationships across a diverse stakeholder network, both onshore and offshore. We’re interested in hearing from people who: You bring a strong foundation in cyber security risk and governance, with the ability to navigate complexity and influence outcomes across a large organisation. Experience in cyber security risk, governance, or third-party/supplier risk management Strong understanding of frameworks such as APRA CPS 234, NIST CSF or ISO 27001 Ability to assess and translate complex cyber risks into pragmatic business outcomes Experience working with suppliers or in enterprise risk environments (highly regarded) Background in financial services or consulting environments (advantageous) Knowledge of application, infrastructure or telecommunications security concepts Strong stakeholder management across technical and non-technical audiences A curious, improvement-focused mindset Why join us We support our people with flexibility to balance where work is done, with at least half your time each month connecting in-office. We also offer a range of flexible working options including adjusted hours, part-time arrangements and job share opportunities. Working with us At CommBank, we're committed to creating an accessible, inclusive and respectful workplace. If you require support or adjustments, please let us know. We welcome applications from people of all backgrounds and we're particularly committed to making a positive difference for Aboriginal and/or Torres Strait Islander Peoples. For support please contact 1800 989 696 If you're already part of the Commonwealth Bank Group (including Bankwest, x15ventures), you'll need to apply through Sidekick to submit a valid application. We’re keen to support you with the next step in your career. We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696. Advertising End Date: 27/07/2026 Whether you’re passionate about customer service, driven by data, or called by creativity, a career with CommBank is for you. Our people bring their diverse backgrounds and unique perspectives to build a respectful, inclusive and flexible workplace. One where we’re driven by our values, and supported to share ideas, initiatives, and energy. One where making a positive impact for customers, communities and each other is part of our every day. Here, you’ll thrive. You’ll be supported when faced with challenges, and empowered to tackle new opportunities. We really love working here, and we think you will too.

Responsibilities

Manage cyber security risks across a complex supplier ecosystem by conducting risk assessments and providing expert input on onboarding and contracts. Partner with internal and external stakeholders to ensure strong governance and effective remediation of identified security non-compliances.