ANZ
Information Security Analyst - Third Party Risk & Controls Testing
Mid levelFull-timeHybridNew South Wales, AustraliaInformation technologyRisk management and complianceCybersecurityPosted 3 months ago
View your fit0 of 9 criteria met
About the job
The Information Security Analyst – Third Party Risk & Controls Testing at Challenger Limited is a dynamic opportunity to manage and mitigate information security risks across a complex third-party ecosystem. This role plays a crucial part in ensuring that external partners meet Challenger’s security standards and supports regulatory compliance. The IT Risk & Security team values collaboration and flexibility, working together to create a secure environment for all.
You'll be responsible for
🔍
Managing third-party risk
Assessing vendor security practices, conducting gap analyses, and driving governance improvements using frameworks like ISO27001, NIST, and CIS.⚙️
Building controls testing maturity
Helping to build maturity in the internal controls testing program, linking findings to risks and supporting the rollout of the new GRC system, Archer.🚨
Contributing to incident response
Participating in incident investigations involving third parties and ensuring compliance with internal policies and external regulations.Skills you'll need
🔒
Information security
A solid foundation in information security principles and practices, particularly in relation to third-party risk management.🤝
Third-party risk management
Understanding of third-party risk management principles and practices, ensuring compliance and governance across external partners.🛡️
Controls testing
Ability to support a controls testing program, assessing design and operating effectiveness, and reporting on control maturity.View more
