Remote job
Director, Third-Party Cyber Defense
Job details
About this role
Role overview
Lead a third-party cyber defense capability focused on responding to supplier security incidents, monitoring external risk signals, and conducting targeted technical assessments. The role builds a repeatable way to determine what supplier incidents mean for the organization, which connections or data may be exposed, and what response is appropriate, in partnership with security, procurement, legal, privacy, and risk teams.
Responsibilities
- Build and lead supplier incident investigation and response, including intake, triage, severity criteria, supplier engagement, playbooks, and escalation. - Direct monitoring and intelligence activities that surface supplier breaches, attack-surface changes, and other security signals. - Lead focused technical assessments when incidents, intelligence, monitoring, or risk referrals call for deeper review; provide findings to the supplier risk function. - Maintain a technical inventory of supplier connections and use supplier, contract, and business-service context to assess exposure. - Coordinate response decisions with enterprise incident command and partner teams, ensuring actions reflect the available evidence. - Develop a consistent operating capability through clear processes, practiced playbooks, and established cross-functional relationships.
Requirements
- Senior leadership experience in cyber defense, supplier incident response, or related security operations. - Strong incident response judgment and ability to lead teams under time pressure. - Understanding of how suppliers connect to large enterprises and how to assess exposure across data, systems, and business services. - Ability to coordinate effectively with third-party risk management, procurement, legal, privacy, and security operations. - Experience building repeatable response practices and turning technical findings into actionable decisions.
Benefits and work setup
Remote work is available, with commuting to a nearby office and/or travel for meaningful collaboration. Home-based employees receive technology equipment and a monthly connectivity reimbursement, and need a private workspace and reliable internet.