Supply Chain Risk & Trade Compliance Specialist

Supermicro•San Jose, CA

About The Position

Supermicro is seeking a Supply Chain Risk & Trade Compliance Specialist to establish and operate a dedicated Federal Supply Chain Risk Management (SCRM) and trade compliance program for SMCI Federal. Reporting to the Director of Federal Compliance, this role bridges federal supply chain security, export controls, and vendor risk governance. This position operates as a dedicated federal resource distinct from, but closely coordinated with, existing commercial Global Trade Compliance (GTC) operations. You will own bill-of-materials tracking (HBOM/SBOM), supplier risk scoring across security and non-security domains, restricted-vendor screening (e.g., NDAA Section 889/1260H), export classifications (ITAR/EAR), and country-of-origin verification required to secure government and defense sales pipelines.

Requirements

Bachelor's degree in Supply Chain Management, International Trade, Computer Science, Engineering, or related field.
5+ years of direct experience in supply chain risk management, federal trade compliance, export controls, or defense supply chain assurance.
Deep expertise in SCRM frameworks (NIST SP 800-161), Federal Acquisition Regulation (FAR/DFARS) supply chain clauses, NDAA restricted vendor rules, Export Administration Regulations (EAR), and International Traffic in Arms Regulations (ITAR).
Strong proficiency in evaluating Hardware/Software Bills of Materials (HBOM/SBOM), conducting component trace-back analysis, and navigating complex, multi-tier supply chain networks.
Ability to design and operate a risk-scoring methodology that synthesizes multiple, non-uniform risk domains into a single, actionable output.

Nice To Haves

Certified Supply Chain Professional (CSCP), CMMC RP, or specialized Trade Compliance Certifications.
Hands-on experience with SAP, SAP GTS, enterprise ERP platforms, or automated restricted-party screening tools; familiarity with continuous vendor security rating platforms (e.g., BitSight, SecurityScorecard).
Background in server hardware, electronics manufacturing, semiconductor, or aerospace & defense supply chains.

Responsibilities

Build, operate, and maintain a dedicated SCRM program for federal-bound products, including complete Hardware Bill of Materials (HBOM) and Software Bill of Materials (SBOM) tracking across active federal server and storage platforms.
Develop and maintain a vendor criticality tiering model and a composite risk-scoring methodology spanning security posture, component/supply chain integrity, trade compliance, financial viability, and geopolitical/concentration risk — driving differentiated assessment depth and reassessment cadence by tier.
Conduct third-party supply chain risk assessments, including supplier cybersecurity posture evaluations, counterfeit parts prevention reviews, restricted-vendor screening (NDAA Section 889/1260H / Entity List), and country-of-origin (TAA/BAA) verification.
Incorporate financial viability monitoring, sub-processor/Nth-party visibility, and supplier business continuity/disaster recovery capability into vendor risk assessments; leverage continuous, outside-in security ratings tools to supplement self-reported vendor data.
Embed repeatable SCRM and trade screening gates into the federal product request process, so new federal SKUs are screened before they're built, not after.
Perform technical Export Control Classification (ECCN and ITAR USML categorization) for federal product lines.
Support federal export licensing, technology diversion monitoring, and regulatory compliance reviews under EAR and ITAR.
Conduct annual supply chain, manufacturing, and facility security reviews; document audit findings and track remediation plans across hardware components and sub-tier suppliers.
Partner with Legal on vendor contract terms — audit rights, data handling and residency requirements, insurance minimums, and breach-notification flow-down — to ensure SCRM requirements are contractually enforceable, not just operationally tracked.
Participate in a cross-functional vendor risk review process (Legal, Security/GRC, business) supporting risk acceptance, remediation, or termination decisions.
Coordinate with the existing commercial Global Trade Compliance function to extend and connect — rather than duplicate — trade compliance capability for federal-specific requirements.
Collaborate with Procurement, Engineering, and Operations to maintain audit-ready records and execute ongoing supplier reassessment cycles, with dashboards for leadership visibility.