Operations Program Manager at Oracle Little Rock, AR

Job Description

Working with Security Leads, Security Point of Contacts (SPOCs), Directors and Managers across Oracle Hardware Supply Chain to ensure that Oracle Hardware teams are using the industry's best security practices as detailed in OSSA and OHWSA
. This applies to the components that Oracle engineers itself and the third-party hardware components we leverage from industry partners. This role spans hardware and includes working with Oracle internal teams and external partners. The job extends from Oracle team education and security process support, to performing security technical and process reviews, through to ensuring that Oracle's partners understand Oracle's security requirements for the future.

• Identify Hardware Supply Chain risk at the External Manufacturing (tier
  1)
• Identify Hardware Supply Chain risk at the Sub tier Suppliers multiple layers deep (tier 1 and tier
  2)
• Author Supply Chain Risk Mitigation Plans (SCRM)
• Mitigating security risks associated with supply chain operations.
• Safeguard business interests amidst evolving security requirements from existing customers.
• Facilitating compliance with security prerequisites for strategic growth plans.
• Establish SCRM working with internal and external cross-functions.

IC4

• Assess, manage, and mitigate diverse risks across Oracle Supply Chain Operations, bolstering resilience and business continuity through strategic and operational initiatives.
• Partner with Oracle Security Oversight Committee (OSOC) to implement controls and measures to drive overall Supply Chain Hardware protection strategies.
• Collaborate with cross-functional stakeholders to yield high-impact insights and recommendations, thereby steering strategy and scalable implementation plans.
• Work with supply chain security teams overseeing physical and site security, information security, supplier risk management, product security, logistics, and supply chain resiliency programs.
• Stay abreast of supply chain security trends, assessing impact on operational practices and programs.
• Establish and sustain a comprehensive Supply Chain Risk Management (SCRM) and Governance, Risk, and Compliance process in alignment with OSOC programs.
• Instill proactive security controls and policies spanning information assets, product development, and the broader supply chain ecosystem.
• Contribute to the formulation and execution of third-party assessments and supply chain security best practices.
• Collaborate with cross-functional security teams to standardize global site policies and security awareness initiatives.
• Develop a robust security training program for supply chain personnel across global operations.
• Collaborate with the OSOC to articulate Supply Chain Security messaging for customers, business partners, and external parties.
• Conduct periodic security audits alongside relevant teams to ensure compliance across in-house sites, External Manufacturers and Suppliers.
• Develop and maintain a communication framework to update GSC leadership, business and design engineering stakeholders.
• Cultivate a relationship of trust with global supply chain leadership to predict, perceive, mitigate, and manage supply chain risks on a global scale.
• Co-create supply chain risk strategy and vision in alignment with global supply chain leadership.
• Translate strategy into actionable initiatives, incorporating risk management and business resiliency practices.
• Assume overall accountability for the supply chain risk management program, collaborating with cross-functional teams to meet industry and regulatory standards.
• Develop robust business policies, processes and tools for continuous risk assessment, business continuity planning, event anticipation, and recovery management.
• Facilitating and performing supply chain hardware security reviews.
• Tracking the progress of supply chain hardware security reviews and producing reports.
• Identifying and driving improvements to the security review processes.
• Collaborate with Security, Enterprise Risk Management, and Compliance teams to foster cross-functional synergy.

Certain US customer or client-facing roles may be required to comply with…