Advisor, Security Operations and Assurance

Advisor, Security Operations and Assurance

Our Dell Global Operations team operates one of the largest end-to-end supply chains in the world. Through innovation and operational excellence, we help Dell Technologies grow and win in the data decade – and the integrity, ingenuity, and expertise of our team is at work every step of the way. We deliver Dell’s innovative technology and services portfolio with industry-leading scale and supply chain capabilities, creating an inclusive workplace where team members can reach their full potential. We care about our impact on the environment, the people, and the companies that make up our supply chain. Furthermore, we proactively work to mitigate risk that could affect our global supply chain and procurement operations. The Supply Chain Assurance organization protects the security, integrity, resilience and compliance of the direct supply chain through disciplined third-party risk management. The organization partners across Security, Procurement, Manufacturing Operations, Global Audit and Transformation, Legal, Information Technology, business teams, and the supplier ecosystem to ensure that assurance activities are risk-based, well governed, data-driven, and continuously improving.

What you’ll achieve:

As an Advisor, you will be responsible for executing third-party risk management operations and supplier-assurance activities within established policies, standards, processes, and governance. As part of a shared operating team, the role will manage complex supplier-vetting, security-assessments, Corrective Action Plans, remediation actions, continuous-monitoring, reporting, and data-quality activities across original design manufacturers, logistics service providers, and other prioritized suppliers. The role will provide additional capacity to an established ODM-focused assurance operation while supporting the expansion of common assurance and remediation practices to LSPs. The successful candidate will independently manage assigned supplier cases, coordinate cross-functional reviews, maintain accurate and auditable records, identify and escalate material risks, and contribute practitioner expertise to the continued improvement of TPRM workflows, playbooks, reporting, training, and technology. The role requires the judgment to distinguish routine operational matters from material risks and exceptions, resolve ambiguity, align stakeholders without direct authority, and drive supplier actions to a documented conclusion while respecting established decision rights.

Join us to do the best work of your career and make a profound social impact as an Advisor on our Security Operations and Assurance
team in Bayan Lepas, Penang.

You will:

· Manage end-to-end third-party risk management (TPRM) activities for assigned ODMs, LSPs, contract manufacturers, and strategic suppliers, including supplier onboarding, profiling, risk assessments, due diligence, remediation, reassessments, and ongoing monitoring.

· Conduct supplier risk assessments and assurance reviews by coordinating supplier engagement, evaluating responses and evidence, facilitating audits and security assessments, resolving gaps, and driving documented risk dispositions.

· Lead Corrective Action Plan (CAP) management from initiation through closure, including remediation planning, evidence validation, progress tracking, escalation management, extensions/exceptions reviews, and governance reporting.

· Drive cross-functional stakeholder collaboration across Security, Procurement, Manufacturing, Logistics, Audit, Legal, IT, Data Governance, business teams, and suppliers to resolve issues, remove blockers, and ensure accountability for risk mitigation activities.

· Maintain operational excellence and continuous improvement through accurate TPRM system administration (Aravo), portfolio performance reporting, compliance with policies and service levels, process optimization, knowledge sharing, and support for workflow automation, analytics, and AI-enabled enhancements.

Every Dell Technologies team member brings something unique to the table. Here’s what we are looking for with this role:

Essential Requirements

· 5+ years of experience in Third-Party Risk Management (TPRM), supplier assurance, compliance, audit remediation, procurement governance, supply chain risk, program management, or related fields.

· Proven expertise in managing supplier risk programs independently, including due diligence, security assessments, audit remediation, Corrective Action Plans (CAPs), issue management, continuous monitoring, and risk escalation within global matrix organizations.

· Strong knowledge of the end-to-end third-party risk lifecycle, including supplier onboarding, risk classification, enhanced due diligence, remediation, exception management, reassessments, change management, and offboarding.

· Hands-on experience with supplier assessments, evidence reviews, and remediation management, including identifying control gaps, driving CAPs to closure, managing approvals, service levels, extensions, and residual-risk decisions.

· Strong analytical, stakeholder management, and reporting skills, with experience using enterprise TPRM/GRC platforms, managing multiple concurrent cases, producing portfolio metrics and dashboards, and collaborating effectively across suppliers, business functions, and leadership teams.

Desirable Requirements

· Experience with enterprise risk and supplier management platforms (e.g., Aravo, TPRM, GRC, or workflow systems), including reporting, dashboards, data integration, workflow automation, analytics, and AI-enabled capabilities to support supplier-risk operations and decision-making.

· Knowledge of supplier assurance and risk disciplines, including experience supporting global supplier networks (ODMs, contract manufacturers, and logistics providers), conducting security and resilience assessments, developing remediation and CAP processes, and contributing to governance frameworks, training, testing, and continuous improvement initiatives; relevant certifications are a plus (e.g., PMP, PMI-RMP, CTPRP, CSCP, CISA, CRISC, ISO 9001 Lead Auditor, or CSPO).