Third Party Risk Manager – Cyber and Technology
As the Third Party Risk Manager – Cyber and Technology, you will lead Scentre Group's enterprise program to reduce cyber, technology, and privacy risks associated with third parties.
Partnering with senior leaders across HR, Legal, Privacy, Enterprise Risk, Technology, and Cyber Security, you'll define and operationalise processes to assess and monitor vendors.
Supported by the Head of Cyber & Technology Risk, you'll drive policy, program delivery, and behavioural change to uplift and embed a robust Third Party Risk function.
Your opportunity
You will set the direction, define scope, and ensure the program delivers against business objectives and regulatory obligations.
Day-to-day responsibilities
Drive the Cyber & Technology Third Party Risk strategy and deliver a 12-month roadmap aligned to business objectives and regulatory obligations.
Act as the primary advisor to business leaders on third party cyber, technology, and privacy risks.
Champion the adoption of third-party risk management practices across the organisation.
Contribute to governance forums and provide clear, risk-based insights and assurance reporting.
Develop and maintain policies, standards, and practical guidance for vendor risk management.
Perform and oversee risk assessments and monitoring, including the use of posture management platforms.
Provide subject-matter expertise during third party incidents and mentor junior analysts to build capability.
What sets you apart
You will be a collaborative influencer who builds trust across business and technology teams, translating technical detail into clear commercial language.
Qualifications
5+ years in third-party risk, information security, privacy, or related disciplines.
Strong ability to design frameworks, drive processes, and deliver assessments end-to-end.
Proven track record engaging and influencing senior stakeholders.
Familiarity with third-party risk platforms (e.g., UpGuard, CyberGRX) and translating technical detail into business outcomes.
Solid understanding of privacy, regulatory, and compliance requirements relevant to Australia.
About us
Scentre Group owns 42 Westfield destinations across Australia and New Zealand.
We create extraordinary places and experiences that connect and enrich communities.
We are focused on our customers and creating more reasons for more people to visit our Westfield destinations more often and for longer.
We aspire to create a workforce reflective of the communities in which we operate and encourage applications from everyone regardless of age, gender, ethnicity, cultural background, faith, disability, sexual orientation, gender identity or life stage.
Benefits
Unique benefits support your wellbeing, career development and lifestyle: five days paid Life Leave (pro-rated for part-time), 18 weeks gender-neutral paid parental leave for primary carers (no qualifying period, super paid for the duration), and free parking at your local Westfield destination.
Seniority level
Mid-Senior level
Employment type
Full-time
Job function
Management and Information Technology
#J-*****-Ljbffr