Third-Party Cybersecurity Risk Management Analyst
Micron TechnologyTaoyuan City, Taiwan
Posted June 2, 2026
Full Time
About the Company
Micron Technology is a leading provider of high-performance memory and storage solutions, including DRAM, NAND, NOR flash, SSDs, and hybrid memory cubes. With a focus on innovation and operational excellence, Micron serves the data center, intelligent edge, and client markets, enabling advancements in AI and compute-intensive applications. The company's commitment to technology leadership and customer-centric approach positions it as a key player in the semiconductor industry.
Job Description
Our vision is to transform how the world uses information to enrich life for all. We are an industry leader in innovative memory and storage solutions transforming how the world uses information to enrich life for all.
Requirements
- Serve as a subject matter expert to ensure and monitor compliance with industry and government cybersecurity, privacy, and regulatory requirements as they relate to third-party relationships at the Enterprise/Region/Site level.
- Conduct third-party risk assessments to evaluate supplier security posture against organizational security, privacy, and resilience requirements.
- Perform gap analysis against frameworks and standards such as ISO 27001, NIST, SOX, TISAX, and GDPR, and drive remediation with suppliers.
- Assess assessment design effectiveness and continually monitor operating effectiveness of third-party security and privacy controls.
- Track, manage, and monitor third-party risk treatment and remediation plans, including supplier follow-ups and evidence validation.
- Develop, revise, and maintain third-party risk management policies, standards, processes, and guidelines through formal change management.
- Support overall third-party governance activities, to include conducting onsite supplier audits if needed, and report third-party cyber risk posture against established enterprise risk metrics.
- Conduct cybersecurity, regulatory, and supplier-related research to support emerging third-party threat identification and risk mitigation activities.
- Understand risk tolerance, contractual obligations, and tradeoffs associated with engaging third parties and effectively communicate risk to internal business, procurement, and technology stakeholders.
- Partner with internal procurement, legal, information security, and business teams to assess, implement, and monitor third-party cybersecurity risk management throughout the supplier lifecycle.
- Advise business-led initiatives on third-party cyber risk considerations, due diligence expectations, and standards compliance.
Benefits
- Retirement Plan
- 401k Matching