Senior Third-Party Risk & Data Governance Consultant

This is a unique opportunity to play a key role within a major privacy and resilience initiative, helping to shape the organisation's approach to third-party data governance, information management, and risk remediation.

The role is highly suited to a consulting-style professional who enjoys working autonomously, solving complex problems, and developing practical frameworks and methodologies. This is less about project execution and more about defining scope, prioritising remediation activities, and recommending pragmatic, risk-based solutions.

Key Responsibilities

• Review and analyse existing third-party risk assessment and benchmarking outcomes.
• Refine and prioritise remediation scope across a diverse portfolio of third-party applications and vendor-managed platforms.
• Develop risk-based remediation frameworks, methodologies, and governance approaches.
• Design prioritisation models and decision-making frameworks to support remediation planning.
• Assess data retention, data disposal, information management, and privacy risks within third-party environments.
• Define recommendations for governance controls, risk treatments, and sustainable operating practices.
• Develop remediation roadmaps, workstream plans, and implementation approaches.
• Support vendor engagement activities relating to data management, retention, and remediation requirements.
• Produce high-quality documentation, governance artefacts, recommendations, and executive-level reporting.
• Partner with business owners and program stakeholders to ensure solutions are practical, achievable, and aligned to risk objectives.

Key Requirements

• 10+ years' experience in Project Management, Business Analysis, Consulting, Risk, Governance, or Transformation roles.
• Demonstrated experience delivering risk remediation, governance, compliance, regulatory, or data-related programs.
• Strong experience in Third-Party Risk Management (TPRM) and/or Vendor Risk Management.
• Deep understanding of Data Governance, Information Management, and data lifecycle management practices.
• Experience working within privacy, risk, compliance, or information governance environments.
• Proven capability developing frameworks, methodologies, governance models, and operating approaches.
• Strong analytical and problem-solving skills with the ability to convert assessment findings into actionable remediation plans.
• Experience applying risk-based prioritisation and decision-making principles.
• Excellent written communication, stakeholder engagement, and documentation skills.
• Ability to work independently, navigate ambiguity, and provide commercially pragmatic recommendations.

Highly Regarded

• Big 4, management consulting, risk advisory, or technology risk consulting experience.
• Experience across privacy remediation, data governance, information management, or regulatory uplift initiatives.
• Exposure to SaaS, cloud-based applications, enterprise systems, or complex third-party technology environments.
• Knowledge of data retention, records management, and information governance best practices.

What's on Offer

• High-impact role within a major enterprise-wide risk and data governance program.
• Opportunity to shape the organisation's approach to third-party data risk remediation.
• Collaborative and high-performing team environment.
• Sydney CBD location with flexible hybrid working arrangements.
• Initial 6-month day-rate contract paying $950-$1,100 per day + Super.
• Potential for extension based on program requirements.

If you're an experienced consultant, PM/BA, or risk professional with expertise in third-party risk, data governance, privacy, and remediation planning, we'd love to hear from you.