TPRM - Analyst/ SA

Role & responsibilities

This role is primarily responsible for:

• Supporting the business to complete the Inherent Risk Assessment (IRA) and Third-Party Assessments (TPA) for all third parties.
• Conducting risk assessments of third-party vendors and partners to identify potential risks and vulnerabilities and collaborating with internal stakeholders to gather necessary information for risk assessments.
• Communicating assessment results to relevant stakeholders, including senior management.
• Providing advice and guidance to the business to ensure all outsourcing and third-party arrangements are within the Group Risk Appetite Statement, enabling the business to build and uplift supplier controls.
• Monitoring and tracking third-party risk metrics and trends using SharePoints and dashboards.
• Performing assurance over supplier performance in meeting risk requirements, including the CPS 234 compliance check and other APRA regulatory requirements. Assisting in the implementation of risk mitigation measures and monitoring their effectiveness.
• Communicating and driving best practices and consistency across the enterprise specific to third-party risk assessment activities.
• Supporting key stakeholders and 2nd line risk partners with the execution of key processes related to third-party risk assessment activities, including the creation and review of internal dashboards.

Requirements

• A deep understanding of information security and business continuity/disaster recovery controls, along with a working knowledge of the following standards/frameworks:
  
• CPS 234
• ISO 27001 and ISO 22301
• NIST Cybersecurity Framework

Preferred candidate profile

Perks and benefits