Supplier Governance Manager - Third Party Risk & CPS 230

About the role

An experienced Supplier Governance Manager is sought to lead supplier governance, third-party risk management and CPS 230 compliance in a highly regulated environment. The role oversees critical supplier risks, strengthens governance frameworks, manages technology and AI-related third-party risks and supports ongoing regulatory compliance. It is advertised as a contract position based in Sydney, New South Wales.

Key responsibilities

• Lead supplier governance and third-party risk activities across critical technology, cloud and AI suppliers.
• Ensure supplier risk frameworks, controls and governance processes align with APRA CPS 230 requirements.
• Assess and manage emerging supplier risks, including AI-related risks, concentration risk and outsourced service provider dependencies.
• Develop, enhance and monitor supplier risk reporting, key risk indicators (KRIs) and governance metrics.
• Conduct supplier risk assessments, due diligence reviews and ongoing monitoring.
• Partner with Risk, Technology, Procurement, Legal and Business teams to strengthen oversight.
• Support contract reviews and supplier management practices.
• Prepare reporting and insights for senior leadership and governance committees.

Required profile

• Strong experience in supplier governance, vendor management, third-party risk, operational risk or outsourcing risk, ideally in a regulated industry such as banking, financial services or insurance.
• Experience assessing critical suppliers, outsourced service providers and technology vendors.
• Ability to influence senior stakeholders and present to executive leadership, risk forums or governance committees.

Required skills

• Strong knowledge of APRA CPS 230 and third-party risk frameworks.
• Understanding of technology, cybersecurity, cloud, data and AI-related supplier risks.
• Experience developing risk frameworks, controls, governance processes, KRIs and management reporting.