Secure Procurement Leader

Job Summary

Owning the Secure Procurement Program, the full-time Secure Procurement Leader will ensure that all third-party hardware, software, firmware, and services meet stringent cybersecurity standards, while working remotely and collaborating across supply chain, product security, and regulatory compliance functions.

Key responsibilities

• Define supplier cybersecurity requirements and policies aligned with ISA/IEC standards, and lead supplier assessments and audits
• Integrate cybersecurity requirements into procurement processes and maintain a cybersecurity-focused Approved Supplier List
• Produce executive-level supplier risk reporting and represent the organization in industry forums and standards bodies

Required qualifications

• Bachelor's degree in Cybersecurity, Engineering, Information Technology, or a related field, or equivalent professional experience
• Significant experience in cybersecurity, supply chain security, or third-party risk management within Operational Technology or Industrial Control Systems environments
• Strong knowledge of ISA/IEC 62443 standards, particularly 62443-2-4 and 62443-2-1
• Experience running supplier security assessment programs and managing remediation pipelines
• Familiarity with Software Bill of Materials (SBOMs) and open-source software risk management