Position: Information Security Supply Chain Risk Specialist
Company: Jabil
Category: Security
Experience required: 2y
English level: upper

Job Description:

The Information Security Supply Chain Risk Specialist supports Global Information Security’s initiatives from a Supply Chain Risk Management perspective. Facilitates risk assessments on Jabil’s supply chain to classify threats to Jabil’s infrastructure and organizational operations, while identifying and recommending appropriate risk mitigations. Provides subject matter expertise on Jabil’s information security supplier requirements.

You will be expected to

•  Lead Information Security’s Vendor Review process.
• Evaluate, comprehend, and communicate compliance evidence documentation such as SOC report(s) and/or ISO 27001k certificates.
• Communicate risk assessment findings to internal solution service owners and external third-party vendors/suppliers.
• Provide consultative advice to internal solution service owners that enables them to make informed risk management decisions.
• Identify appropriate controls to effectively manage information risks, as needed.
• Identify opportunities to improve risk posture and assess the residual risk.
• Review and provide feedback on technology third-party contractual agreements.
• Maintain strong working relationships with individuals and groups involved in managing information risks across the organization.
• Connect the dots between Jabil’s supply chain and current risks posed to the IT environment.
• Recommend changes to procedures and standards to ensure compliance while minimizing the impact on business processes.
• Serve as a focal point for escalation and solution of Information Security SCM risk issues.
• Participate and collaborate in enterprise wide supply chain risk initiatives.
• Maintain positive relations with all employees and seek suggestions/ways of improving compliance of IT processes and systems.
• Drive process, procedure and systems continuous improvement, identify creative ways to reduce costs by streamlining them, assure they are efficient and not redundant.
• Participate in/drive projects and ensure timely project delivery. Organize own work effectively and efficiently.
• Maintain discretion and confidentiality in all areas pertaining to data and proprietary information whether internal to Jabil or customer-specific.
• Maintain discretion and confidentiality in all areas pertaining to IT systems.
• Participate in the exchange of ideas within the department. Ask questions and encourage input from other team members.
• Understand and embrace the business and IT strategic direction.
• Provide regular updates to appropriate managers and conference with them on complex or unusual situations.
• Demonstrate commitment to customer service: anticipate, meet and exceed customer expectations, solve customer problems quickly and effectively, make customer issues a priority.
• Exchange knowledge and information with other Jabil facilities to ensure best practices are shared throughout the Jabil organization.

Requirements:

•  Customer service skills as well as effective communication skills — both verbal and written.
• Ability to follow written and verbal directions.
• Very good presentation skills.
• Meticulous attention to details.
• Strong organization and planning skills.
• Ability to work effectively under pressure with constantly changing priorities and deadlines.
• Ability to coordinate work from multiple resources, including remote ones.
• Self-starter and the ability to work with minimal supervision.
• Knowledge of Information Security frameworks such as ISO27001 and NIST
• Proficiency in use of personal computers, Microsoft Office products (Excel, Word and PowerPoint) and e-mail skills required.
• CISA, CISSP, CISM certifications would be a strong advantage
• Spoken English