Supply Chain Information Security Assessor – APAC

About the role

Amazon is looking for a Supply Chain Information Security Assessor to protect the lifecycle of standards, procedures, and logical assets across its APAC supplier network. The role involves extensive travel (up to 75%) to evaluate security controls at contract manufacturers and downstream sub‑suppliers.

Key responsibilities

• Map end‑to‑end document workflows at contract‑manufacturer facilities, assessing receipt, storage, distribution, and destruction processes.
• Evaluate transmission methods and storage controls for data‑in‑transit and data‑at‑rest risks, ensuring auditable logs.
• Track the flow of Amazon IP to sub‑suppliers, document content types, delivery methods, and retention points, and identify contractual security gaps.
• Inventory logical assets (software licenses, firmware, digital keys, credentials) provided to suppliers and verify secure return or revocation.
• Influence security outcomes through trust‑based relationships, document findings, assign risk ratings, and follow up on remediation.
• Contribute to standardized assessment frameworks and automation tools for document lifecycle security.

Required profile

• Bachelor’s degree in Cybersecurity, Information Security, or a related field.
• Fluency in Mandarin and English (written and verbal).
• Minimum 3 years of experience conducting cybersecurity assessments.

Required skills

• Data transmission security
• Document lifecycle management
• Cybersecurity assessment methodology
• Logical asset governance

What we offer

• Opportunity to work on high‑impact security initiatives across a global supply chain.
• Exposure to diverse manufacturing ecosystems in the APAC region.
• Travel‑intensive role fostering cross‑cultural collaboration.