Supply Chain Security Engineer - Taipei

Location: Taiwan (Taipei)

Join Fortinet, a cybersecurity pioneer with over two decades of excellence, as we continue to shape the future of cybersecurity and redefine the intersection of networking and security. At Fortinet, our mission is to safeguard people, devices, and data everywhere. We are currently seeking a dynamic Supply Chain Security Engineer to contribute to the success of our rapidly growing business.

As a Supply Chain Security Engineer, you will:

• Support Fortinet’s Supply Chain Risk Management program.  
• Coordinate IT security governance, risk and compliance activities through Fortinet supply chain partners.
• Be responsible for supply chain partners compliance with Fortinet’s Trusted Supplier Program requirements.
• Conduct risk analysis and gap assessment of Fortinet’s supply chain partners security policies and practices.
• Perform supply chain partners’ audit by processing security assessments and coordinate with internal and external functions and audit resources.
• Provide supply chain partners recommendations to address TSP compliance issues.
• Monitor security posture of supply chain partners’ network environment including but not limited to daily logs review, potential security events checks and vulnerability management.
• Support and collaborate with Fortinet’s supply chain partners to process incident management including incident investigation and response, recommendations and reporting.

We Are Looking For:

An insightful and influential collaborator to join our team. We encourage you to apply for this position if you have the following qualities:

• Bachelor’s degree in Information Security/Systems, Computer/Electronic Engineering, Communications Engineering or related field (or foreign equivalent).
• Minimum of five (5) years of experience as an Information Security or Compliance Analyst, Systems Engineer, IT Administrator/Analyst, or related occupation.
• Experience in electronics supply chain management or contract manufacturing (a plus).
• Experience in design and implementation of information security policies and controls.
• Compliance Management (ISO, SOC2, GDPR, NIST, etc.).
• Risk Assessment, Risk Mitigation.
• Information Security Audit.
• Familiar with ISO 27001 (must), NIST SP 800-161 and/or NIST SP 800-53 (a plus).
• CISSP, CISM, or CISA (a plus).
• Experience in cyber security incident management.
• Travel Requirements: Up to 10%.

Why Join Us:

At Fortinet, we embrace diversity and inclusivity. We encourage applications from diverse backgrounds and identities. Explore our welcoming work environment designed for a rewarding career journey with an attractive Total Rewards package to support you with your overall health and financial well-being. Join us in bringing solutions that make a meaningful and lasting impact to our 660,000+ customers around the globe.

 

We will only notify shortlisted candidates.

Fortinet will not entertain any unsolicited resumes, please refrain from sending them to any Fortinet employees or Fortinet email aliases. Should any Agency submit any resumes to Fortinet, these resumes if considered, will be assumed to have been given by the Agency free of any related fees/charges.

#LI-JC1

Fortinet makes possible a digital world that we can always trust through its mission to protect people, devices, and data everywhere. This is why the world’s largest enterprises, service providers, and government organizations choose Fortinet to securely accelerate their digital journey. The Fortinet Security Fabric platform delivers broad, integrated, and automated protections across the entire digital attack surface, securing critical devices, data, applications, and connections from the data center to the cloud to the home office. Ranking #1 in the most security appliances shipped worldwide, more than 615,000 customers trust Fortinet to protect their businesses. And the Fortinet NSE Training Institute, an initiative of Fortinet’s Training Advancement Agenda (TAA), provides one of the largest and broadest training programs in the industry to make cyber training and new career opportunities available to everyone.