Supplier Risk Assessor is an important role in ensuring Supplier Management stays compliant with regulations and security frameworks. The world is focused on Supply Chain Security due to recent incidents reported in the news. The processes and controls we implement in Cloud must meet the requirements from ever-increasing regulatory requirements, security framework requirements and industry-specific requirements. As we continue to expand our global footprint and expand into additional Regulated Cloud offerings for specific highly regulated industries, there is a need to focus across the requirements and implement operational controls that meet all the requirements to maximize efficiency, consistency, and audit readiness.
Responsibilities:Facilitate Supplier risk management activities leveraging internal IBM policies, procedures, tools, and resources as a management lifecycle.
Ensure IBM Cloud stakeholders and Suppliers complete required self-assessments & questionnaires.
Conduct risk assessments, Supplier risk analysis, Supplier criticality, and understanding of Supplier security posture.
Identify potential attack vectors in the IBM Cloud supply chain and develop risk mitigation strategies to reduce the risk exposure to the IBM enterprise.
Track and report Supplier criticality and risks through assessment and ongoing (continuous monitoring) activities
Represent IBM Cloud in discussions with Cloud stakeholders, Clients and Suppliers
Develop and implement policies and procedures to improve supplier risk management capabilities of the Supplier Management Office
Support IBM Cloud Stakeholders and Suppliers in meeting regulatory requirements as determined by operating environments, contractual obligations, governmental organizations, and regulatory bodies globally.
Ensure applicable requirements and regulatory compliance are documented and managed for IBM Cloud Suppliers
Educate and advise IBM Cloud stakeholders, Clients and Suppliers on risk management strategies and promote process efficiencies through automation and tool integration.
Act in compliance with all relevant IBM business conduct guidelines and client driven processes
Assist in the creation of solutions that balance business requirements with IBM Cloud security requirements.
Communicate, interact and negotiate with IBM stakeholders, Clients and Suppliers through all levels of the organization globally.
