Secure Procurement Leader

Job Summary

Owning and managing the enterprise Secure Procurement Program, the full-time Secure Procurement Leader will ensure third-party hardware, software, and services meet security requirements aligned with ISA/IEC 62443 standards while collaborating with cross-functional teams in a remote environment.

Key responsibilities

• Define supplier cybersecurity requirements and embed security obligations into procurement contracts
• Conduct supplier cybersecurity assessments and audits, tracking risks and compliance status
• Drive SBOM adoption and manage open-source software risk while delivering supplier risk reporting

Required qualifications

• Bachelor's degree or equivalent experience
• 8+ years of experience in cybersecurity, supply chain security, or third-party risk management in an OT/ICS environment
• Strong knowledge of ISA/IEC 62443 standards, particularly 62443-2-4 and 62443-2-1
• Experience running supplier security assessment programs and managing remediation
• Familiarity with SBOMs, SCA tools, and OSS risk management