Cyber Risk Analyst

Triniti is seeking a Cyber Risk Analyst for a five-month contract to support a Federal Government agency’s growing Third-Party Risk Management program. Working under the Lead Cyber Risk Specialist and alongside the Cyber Resilience team, you’ll assess the security risks associated with vendors, research partners and service providers.

The role
You’ll deliver third-party security assessments from vendor intake and risk tiering through to evidence review, documented findings and treatment recommendations. Your responsibilities will include:

• Reviewing supplier questionnaires and supporting security documentation.
• Assessing controls covering access management, encryption, backup and recovery, vulnerability management, penetration testing and incident response.
• Identifying and rating risks, producing clear assessment reports and recommending practical treatments.
• Working with business owners and suppliers to agree remediation owners and timeframes.
• Using UpGuard to support assessments and security monitoring and maintaining assessment and risk records.
• Contributing to improvements in assessment processes, questionnaires and templates.

About you

• Experience conducting third-party, vendor or supplier security risk assessments, supported by a sound understanding of inherent and residual risk, likelihood, consequence and treatment planning.
• Comfortable managing multiple assessments under the direction of a lead, evaluating security evidence and communicating findings clearly to technical and non-technical stakeholders.
• Familiarity with Australian Federal Government security frameworks including PSPF, ISM, ISO 27001, NIST CSF or the Essential Eight would be valuable, alongside relevant cybersecurity certifications and an understanding of privacy obligations.
• Previous UpGuard experience would be useful.
• Preferred location - Sydney or Brisbane, with a work-from-home arrangement.
• Australian Citizens only - existing Baseline security clearance is required, NV1 would be advantageous.

What next?
If you have 3+ years of relevant experience, please apply and advise of your availability and indicative hourly rate. Shortlisted candidates will also need to provide a one-page pitch addressing their suitability for the role. The role closes for submission COB Monday 28th Sept 2026.   

As a 100% Australian-owned SME and locally based IT recruitment firm, Triniti has a dedicated Federal Government practice offering responsive delivery, competitive pricing and a deeply experienced team that understands Commonwealth environments.