Background information about the job or company

Use your risk and assurance expertise to strengthen how NAB manages third-party vendors. In this role, you’ll assess critical controls, drive best practice, and help protect the bank and our customers by ensuring key partners meet NAB’s risk standards.

Drive better third-party risk outcomes.

Protect NAB through stronger third-party assurance.

Improve third-party controls. Strengthen customer protection.

Our people are customer obsessed. They prioritise the needs and satisfaction of the customer above all else. Our mindset fosters innovation and creates strong, lasting customer relationships as we strive to be the most customer centric company in Australia and New Zealand.

In the role of a Senior Associate Third Party Assurance, you will join the T&EO Risk Governance & Reporting – Third Party Enhanced Assurance team that’s doubling down on customer obsession.

Responsibilities or duties

Each day, you’ll go above and beyond to:

• Conducting Third-Party Enhanced Assurance Reviews to ensure that services performed are consistent with relevant policies, contractual and regulatory requirements
• Providing advice and guidance to the business to ensure third-party arrangements are within the Group Risk Appetite Statement
• Designing controls with control owners across the enterprise and facilitating documentation in our risk management system for targeted controls; confirming appropriate implementation of controls
• Supporting Relationship Managers and/or Technology Owners to assess or remediate Third Party controls
• Communicating and driving best practice and consistency across the enterprise specific to third-party risk assurance activities

Qualifications or requirements

We’re looking for the best and brightest to deliver the best for our customers. You’ll need:

• Extensive experience in risk management and/or internal audit experience
• Experience in Third Party Risk domain
• Experience in Cloud, IT/Cyber Security and/or operational risk management
• Experience in TPRM and driving initiatives with vendors
• Information security/cloud (SaaS/PaaS/IaaS) related certification (CISM/CISSP/CISA/Lead auditor for infosec/cloud) would be a plus

Any other provided details

A diverse and inclusive workplace works better for everyone

We know that our people make us who we are. That's why we have built a culture of equity and respect – where everyone feels valued and appreciated for being their authentic selves. In partnership with our multiple Employee Resource Groups (ERGs) we continue to foster an inclusive environment, where all NAB colleagues’ unique backgrounds and identities are understood, respected and celebrated. We are committed to providing an environment where you can work your way.

• Conducting Third-Party Enhanced Assurance Reviews to ensure that services performed are consistent with relevant policies, contractual and regulatory requirements
• Providing advice and guidance to the business to ensure third-party arrangements are within the Group Risk Appetite Statement
• Designing controls with control owners across the enterprise and facilitating documentation in our risk management system for targeted controls; confirming appropriate implementation of controls
• Supporting Relationship Managers and/or Technology Owners to assess or remediate Third Party controls
• Communicating and driving best practice and consistency across the enterprise specific to third-party risk assurance activities

• Risk management
• Internal audit
• Third Party Risk domain
• Cloud, IT/Cyber Security and/or operational risk management
• TPRM
• Driving initiatives with vendors
• Information security/cloud (SaaS/PaaS/IaaS) related certification (CISM/CISSP/CISA/Lead auditor for infosec/cloud)

• Extensive experience in risk management and/or internal audit experience
• Experience in Third Party Risk domain
• Experience in Cloud, IT/Cyber Security and/or operational risk management
• Experience in TPRM and driving initiatives with vendors
• Information security/cloud (SaaS/PaaS/IaaS) related certification (CISM/CISSP/CISA/Lead auditor for infosec/cloud) would be a plus