Supply Chain Information Security Assessor, Supply Chain Intellectual Property Security

Amazon is hiring a Supply Chain Information Security Assessor, Supply Chain Intellectual Property Security in Shenzhen, China. Level rates it ; you can apply on Amazon.

Level's read on this job

Level rates this cybersecurity role Little AI ●○○○: aI is not part of the work.
The posting mentions information security, supply chain security and document control among its tools and skills.
Level classes it as a senior role.
Amazon has 21,000+ other open roles on Level.

AI in this role

Assess information security and protect supply chain intellectual property and assets across APAC contract manufacturers.

information-securitysupply-chain-securitydocument-controlauditcompliance

Overview: We're seeking a Supply Chain Information Security Assessor to protect the lifecycle of standards, procedures, and logical assets across Amazon's supplier network in APAC. This role requires international travel (up to 75%) across the APAC region.

The Supply Chain information Security Assessor plays a critical role in mapping how sensitive content moves from Amazon through contract manufacturers (CMs) and downstream to sub-suppliers, assessing controls at each stage, and driving remediation through influence rather than direct authority. This position involves conducting on-site evaluations of Document Control Centers, verifying transmission and destruction processes, tracking logical asset governance (Standards and procedures, software licenses, firmware, digital keys), and identifying where Amazon's security obligations terminate in the contractual chain.

The ideal candidate will have technical expertise in data transmission security and document lifecycle management, a strong understanding of manufacturing and supplier ecosystems, and the ability to build trust-based relationships that drive security outcomes across multi-tiered supply chains without direct reporting authority. Fluency in both Mandarin (Chinese) and English is required.

Key job responsibilities
SOP & Document Lifecycle Assessment
• Map end-to-end document workflows at CM facilities: receipt, storage in Document Control Centers (DCC), distribution to the factory floor, and destruction.
• Assess transmission methods and storage controls for data-in-transit and data-at-rest risks.
• Verify destruction processes (physical and digital) meet corporate standards with auditable logs.

Downstream Information Flow & Contractual Navigation
• Map how Amazon IP flows from CMs to sub-suppliers (component makers, PCB houses, tooling vendors), documenting content type, delivery method, and retention at each node.
• Identify where Amazon's security requirements terminate in the contractual chain and flag gaps where sensitive content reaches suppliers with no direct obligation to Amazon.
• Coordinate with Legal, Operations, and supply chain stakeholders to recommend remediation paths.

Logical Asset Governance
• Track and inventory logical assets (software licenses, firmware, digital keys, credentials) provided to suppliers; verify return, revocation, or secure destruction when no longer needed.

Influence, Reporting & Continuous Improvement
• Drive security outcomes across CM organizations and sub-supplier tiers through trust-based relationships, without direct reporting authority.
• Document findings, develop risk ratings, and track remediation closure through follow-up assessments.
• Contribute to standardized assessment frameworks and automation tools for document lifecycle security.

Basic qualifications

- Bachelor's degree in Cybersecurity, Information Security, or a related field
- Fluency in both Mandarin (Chinese) and English (written and verbal).
- 3+ years of experience in cybersecurity assessments, document control, or supplier security evaluations.
- Understanding of data transmission security and document lifecycle management, including controlled distribution and certified destruction.
- Familiarity with security frameworks (ISO 27001, ISO 9001 document control clauses, or similar).
- Ability to influence outcomes across organizations without direct authority; strong interpersonal and stakeholder management skills.
- Excellent analytical, documentation, and reporting skills.
- Willingness to travel up to 75% across APAC region

Preferred qualifications

- Experience in manufacturing, electronics, or hardware production environments.
- Understanding of physical security principles (access control, CCTV, secure storage).
- Certifications such as CISSP, CISA, CISM, ISO 27001 Lead Auditor, or Certified Document Controller.
- Experience mapping multi-tiered supply chains and downstream information flow to sub-suppliers.
- Familiarity with contract structures, NDA frameworks, and IP protection mechanisms in APAC manufacturing.
- Knowledge of secure destruction standards (NIST SP 800-88).
- Experience with document management systems (DMS) or quality management systems (QMS).
- Vietnamese language skills are a plus.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

How we rate this

Supply Chain Information Security Assessor, Supply Chain Intellectual Property Security at Amazon rates 0 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.

Classification

Little AI. AI is not part of the work.

●●●● Builds AI80 to 100
●●●○ Works on AI60 to 79
●●○○ Uses AI40 to 59
●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.

Key facts

Supply Chain Information Security Assessor, Supply Chain Intellectual Property Security is an open job at Amazon.
Level rates this role AI Level 1 of 4: Little AI.
The role is based in CN, 44, Shenzhen.
The job was posted on July 28, 2026.
Seniority: senior.
Applications are handled by Amazon. Apply on Amazon

Prepare for this job

Built from this posting and from similar jobs on Level.

Skills and AI tools this role asks for

Information SecuritySupply Chain SecurityDocument ControlAuditCompliance

Also common in cybersecurity jobs at this level

Python AWS Azure Google Cloud Kubernetes Terraform

Pay

Typical cybersecurity job: $159k

This posting doesn't list pay. Use the typical cybersecurity figure when pay comes up. See cybersecurity jobs

Questions you could be asked

Tell me about a project where information security was part of your work. What did you do?
Tell me about a project where supply chain security was part of your work. What did you do?
Tell me about a project where document control was part of your work. What did you do?
Tell me about a project where audit was part of your work. What did you do?
Tell me about a project where compliance was part of your work. What did you do?

Adapt your resume

List these exact terms on your resume: Information Security, Supply Chain Security, Document Control, Audit, and Compliance. An applicant tracking system matches the wording, not the idea.
Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.

Want an expert to read your CV for this job?

Free. Send your CV and the role you want next. We reply by email within 2 to 4 business days.

Get a free CV review Get your CV rewritten Check your resume with the ATS resume checker