Back to jobs
tags.new

Third Party Risk Manager (Senior Associate)

Melbourne, Australia

Location: Melbourne or Sydney, Australia
Reports to: Global Head of Information Security

The Role

Teneo is seeking a Third-Party Risk Manager (Senior Associate) to support the build-out and day-to-day operation of the firm’s Third-Party Risk Management (TPRM) programme.

This role is suited to a risk professional with a solid foundation in third-party risk, cybersecurity risk, or GRC, who is looking to step into a broader programme role with the opportunity to help shape processes, tooling, and ways of working - with senior support and direction.

You will work closely with Information Security leadership and key stakeholders across procurement, legal, IT, and the business to help establish and run a scalable, risk-based TPRM approach that supports both traditional vendors and emerging technology providers, including AI and SaaS platforms.

Responsibilities

TPRM Programme Build-out & Operation (Primary Focus)

  • Support the development and operationalisation of Teneo’s Third Party Risk Management programme, including policies, standards, workflows, and reporting.
  • Help implement a scalable, risk-based approach to third-party risk that considers vendor criticality, data sensitivity, and business impact.
  • Assist in embedding third-party risk lifecycle processes, including onboarding, due diligence, contracting support, ongoing monitoring, issue management, and off-boarding.
  • Contribute to the development and maintenance of repeatable vendor assessment methodologies across professional services, technology providers, SaaS platforms, and AI vendors.

Tooling, Monitoring & Execution

  • Support the implementation and ongoing use of Teneo’s third-party risk tooling (UpGuard).
  • Assist with configuring dashboards, workflows, and alerts to improve visibility into third-party risk exposure.
  • Help triage, track, and follow up on third-party risk issues identified through assessments or tooling.
  • Support remediation tracking and escalation in line with agreed risk tolerances.

AI & Emerging Technology Risk

  • Support the assessment of AI-enabled and emerging technology vendors, with guidance from senior stakeholders.
  • Contribute to third-party risk approaches that consider AI-specific risks such as data usage, privacy, security, and resilience.
  • Stay informed on evolving industry guidance and best practices related to AI and third-party risk.

Stakeholder Engagement & Advisory

  • Act as a key point of coordination for third-party risk activities across the business.
  • Work with procurement, legal, IT, and security teams to support third-party risk activities within sourcing and contracting processes.
  • Communicate third-party risk findings clearly to stakeholders, escalating issues where required.

Governance, Reporting & Assurance

  • Assist with maintaining third-party risk reporting, metrics, and registers.
  • Support audits, client assurance requests, and internal reviews related to third-party risk.
  • Help maintain appropriate documentation, evidence, and records to support Teneo’s security and risk objectives.

Basic Requirements

  • 4–6+ years of experience in third-party risk, cybersecurity risk, GRC, or technology risk roles.
  • Working knowledge of third-party and supply-chain risk concepts, particularly in technology, SaaS, or cloud environments.
  • Experience supporting or operating third-party risk assessments and remediation tracking.
  • Familiarity with third-party risk tools or continuous monitoring platforms (UpGuard experience desirable but not required).
  • Comfortable working in a structured but evolving environment where processes are still being built.
  • Strong written and verbal communication skills, with the ability to explain risk clearly to non-technical stakeholders.

Preferred Requirements

  • Exposure to assessing SaaS, cloud, or AI vendors and associated data or security risks.
  • Familiarity with standards and frameworks such as ISO 27001, NIST, SOC 2, or similar.
  • Awareness of common vendor assessment libraries (e.g. SIG, CAIQ).
  • Experience working in professional services, consulting, or fast-paced environments.
  • Relevant certifications (CISM, CISSP, CRISC, or similar) are beneficial but not required.

What We Can Offer

  • Competitive salary
  • Health and wellbeing support provided by Intellect Holistic
  • $500 annual health and wellness stipend
  • Annual leave: 20 days plus three-day annual closure between Christmas Eve and New Year’s Eve
  • 1 day of leave during birthday month
  • 1 wellness day
  • 10 days per annum personal/carer’s leave

About Teneo

Teneo is the global CEO advisory firm. We partner with our clients globally to do great things for a better future.

Drawing upon our global team and expansive network of senior advisors, we provide advisory services across five business segments on a stand-alone or fully integrated basis. Our clients include many of the Fortune 100 and FTSE 100, alongside leading financial institutions and public-sector organisations.

With more than 1,600 employees across 45+ offices worldwide, Teneo delivers expertise across strategic communications, investor relations, financial transactions, management consulting, cyber and physical risk, governance, ESG, and geopolitical advisory.

#LI-Hybrid

Apply for this job

*

indicates a required field

Resume/CV

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Teneo external feed for LinkedIn ’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.