Cyber Security Project Manager Jobs in Portland, OR

Who We Are

Ichor is a dynamic, publicly traded company with a global presence. We develop leading fluid delivery systems, sub-systems, and components for the semiconductor fabrication industry, and to a lesser extent, aerospace, defense, and medical. Since going public in 2016, we have continued to grow and evolve as an enterprise, both through organic growth as well as acquisitions. 

ESG program management and reporting

• Act as the Ichor Supply Chain ESG program manager working with Ichor Head of Corporate Social Responsibility.

• Support the Ichor's ESG program by collecting, organizing, validating, and reporting data related to environmental, social, governance, and supplier responsibility topics.

• Coordinate ESG-related customer questionnaires, supplier surveys, internal data calls, and annual reporting activities.

• Maintain Ichor Supply Chain ESG documentation, including policies, procedures, supplier requirements, evidence files, metrics, dashboards, and management review materials.

• Track ESG program performance, gaps, corrective actions, and improvement initiatives.

• Support customer-driven and supply chain-specific ESG requirements, including supplier codes of conduct, human rights, forced labor, emissions, waste, energy, water, responsible sourcing, and supply-chain transparency.

   Product Compliance

• Manage supplier and product compliance data related to requirements such as RoHS, REACH, PFAS, TSCA, Proposition 65, SCIP, restricted substances, customer-specific material restrictions, and full material declarations.

• Coordinate with Engineering, Supplier Quality, Procurement, and suppliers to obtain and maintain product compliance declarations.

• Support part-level and supplier-level compliance reviews for semiconductor equipment components, including electronics, PCBAs, seals, O-rings, tubing, coatings, machined parts, weldments, valves, fittings, and fluid delivery assemblies.

• Maintain product compliance records and customer response packages.

• Monitor regulatory and customer requirement changes and help translate them into internal processes, supplier requirements, and action plans.

• Support compliance assessments for new products, new suppliers, engineering changes, and customer-specific declarations.

   Conflict Minerals

• Administer the company's conflict minerals and responsible minerals program, including supplier outreach, CMRT/EMRT/AMRT collection, validation, tracking, and reporting.

• Support due diligence related to tin, tantalum, tungsten, gold, cobalt, mica, and other customer-designated minerals.

• Review supplier declarations for completeness, smelter/refiner identification, red flags, and alignment with recognized responsible minerals frameworks.

• Maintain supplier response dashboards, smelter/refiner risk summaries, escalation logs, and corrective action tracking.

• Coordinate with Procurement and Supplier Quality to escalate incomplete, inaccurate, or high-risk supplier responses.

• Prepare customer-ready responsible minerals reporting packages and support annual management review.

   Supplier Risk Assessment

• Administer supplier risk assessment tools.

• Maintain supplier, site, part, commodity, and risk data within the supplier risk platform.

• Coordinate supplier onboarding, survey completion, data validation, and supplier profile maintenance.

• Support supply-chain mapping activities, including supplier-site, part-site, and sub-tier dependency tracking.

• Monitor supplier risk indicators, disruption alerts, geopolitical risks, natural disasters, forced-labor risks, financial risks, and other supply-chain risk events.

• Prepare supplier risk dashboards, scorecards, executive summaries, and mitigation tracking reports.

• Work with Supply Chain, Planning, Sourcing, Operations, and Business Continuity teams to identify critical suppliers, single-source dependencies, and mitigation priorities.

• Track supplier risk mitigation actions and support business reviews with strategic suppliers.

   Cybersecurity representative for business partners

• Serve as a business representative for cybersecurity-related compliance topics affecting suppliers, customers, and internal business processes.

• Coordinate with IT and Cybersecurity teams on customer cybersecurity questionnaires, supplier cybersecurity assessments, data security reviews, access-control requirements, and third-party risk topics.

• Maintain records of cybersecurity-related customer and supplier responses, exceptions, and open action items.

  Policy, Procedure, and Control Management

• Develop and maintain policies, procedures, work instructions, templates, supplier communications, and control documentation related to ESG, product compliance, responsible minerals, supplier risk, and business cybersecurity coordination.

• Support internal audits, customer audits, supplier audits, and management reviews.

• Identify process gaps and recommend corrective actions, automation opportunities, and control improvements.

• Maintain compliance calendars, recurring reporting schedules, supplier campaign timelines, and evidence repositories.

• Support training and awareness for internal stakeholders and suppliers.

   Compliance Program Improvement/Transformation

• Lead cross-functional improvement initiatives related to ESG, product compliance, responsible minerals, supplier risk, and supplier data quality.

• Establish compliance KPIs, targets, and maturity metrics and drive corrective actions to closure.

• Identify systemic compliance process gaps and lead implementation of process, system, and organizational improvements.

• Partner with Procurement, Quality, Engineering, IT, and Legal to improve supplier responsiveness, compliance data accuracy, risk visibility, and regulatory readiness.

• Drive automation and simplification of supplier compliance processes, reporting, and risk management workflows.

• Benchmark industry best practices and recommend enhancements to compliance governance and operating models.

• Present program performance, risks, and improvement opportunities to executive leadership.

Required:

• Bachelor's degree in Supply Chain, Business, Engineering, Sustainability, Environmental Management, Compliance, International Business, Information Systems, or a related field.

• 5+ years of experience in compliance, supply chain, supplier management, ESG, product compliance, quality, trade compliance, procurement, risk management, or a related function.

• Experience managing supplier data collection, supplier surveys, compliance declarations, supplier risk assessments, or customer compliance responses.

• Familiarity with one or more areas such as ESG reporting, RoHS, REACH, PFAS, TSCA, Proposition 65, SCIP, conflict minerals, responsible minerals, supplier risk management, supplier qualification, audits, CAPA, or third-party cybersecurity assessments.

• Strong program management skills with the ability to manage multiple workstreams, deadlines, stakeholders, and reporting cycles.

• Strong analytical skills, including the ability to review supplier data, identify gaps, validate responses, and summarize risks.

• Strong written communication skills, including policy writing, executive summaries, supplier communications, and customer response preparation.

• Proficiency with Microsoft Excel, PowerPoint, SharePoint, and compliance tracking tools.

Preferred:

• Experience in semiconductor, electronics, capital equipment, precision manufacturing, aerospace, medical device, automotive, or other highly regulated manufacturing environments.

• Experience with supplier risk platforms such as Resilinc, Everstream, Assent, SupplierSoft, EcoVadis, IntegrityNext, OneTrust, SAP Ariba, Coupa, or similar tools.

• Experience with CMRT, EMRT, AMRT, IPC-1752, material declarations, supplier ESG questionnaires, or customer compliance portals. Has run campaigns and handled compliance declarations.

• Familiarity with semiconductor manufacturing supply chains, including fluid delivery systems, gas delivery systems, chemical delivery systems, weldments, machined parts, valves, fittings, seals, electronics, and PCBAs.

• Experience supporting customer audits, supplier audits, internal compliance reviews, or management system documentation.

• Familiarity with supplier cybersecurity, third-party risk management, data protection, access control, or customer security questionnaires.

• Working knowledge of ISO 14001, ISO 9001, RBA Code of Conduct, OECD Due Diligence Guidance, GRI, SASB/ISSB, CDP, or customer sustainability requirements.