Cybersecurity Engineer

Amkor Worldwide Services LLC-ROHQ; Muntinlupa; On-site; PHP 670,000 - 1,004,000; Full time

Job summary

Amkor Worldwide Services LLC-ROHQ is seeking an information security professional to support the enterprise cyber security Third Party / Supply Chain Risk Management program, focusing on vendor risk assessments and remediation across global suppliers.

You will perform third-party security risk assessments, analyze responses and evidence, monitor risk posture using intelligence platforms, and track remediation of findings.

Responsibilities

• Perform third-party security risk assessments using standardized questionnaires and internal methodologies.
• Analyze vendor responses, supporting evidence, and identify control gaps and risk exposures.
• Conduct ongoing monitoring of vendors using risk intelligence platforms (e.g., SecurityScorecard, BitSight, UpGuard).
• Track and manage remediation of vendor findings and exceptions.
• Support integration of SCRM into the procurement and vendor onboarding lifecycle.
• Review vendor contracts for security and data protection requirements and escalations.
• Maintain accurate records of vendor assessments, risk ratings, and status in GRC platforms (e.g., ServiceNow, SecurityScorecard).
• Assist with third‑party risk reporting and metrics (KPIs/KRIs).
• Support internal and external audits related to supply chain risk.
• Identify risks from SaaS providers, cloud vendors, and critical suppliers.
• Collaborate with Legal, Procurement, Privacy, and IT teams globally

Job description

Position Summary:

This information security role will support the execution and continuous improvement of the enterprise cyber security Third Party / Supply Chain Risk Management program. This position is responsible for performing vendor risk assessments, monitoring third-party risk posture, and supporting remediation activities across global suppliers and partners.

Key Responsibilities:

• Perform third-party security risk assessments using standardized questionnaires and internal methodologies
• Analyze vendor responses, supporting evidence, and identify control gaps and risk exposures
• Conduct ongoing monitoring of vendors using risk intelligence platforms (e.g., SecurityScorecard, BitSight, UpGuard)
• Track and manage remediation of vendor findings and exceptions
• Support integration of SCRM into the procurement and vendor onboarding lifecycle
• Review vendor contracts for security and data protection requirements and escal…
• Maintain accurate records of vendor assessments, risk ratings, and status in GRC platforms (e.g., ServiceNow, SecurityScorecard)
• Assist with third‑party risk reporting and metrics (KPIs/KRIs)
• Support internal and external audits related to supply chain risk
• Identify risks from SaaS providers, cloud vendors, and critical suppliers
• Collaborate with Legal, Procurement, Privacy, and IT teams globally