Supply Chain Risk Lead
Core
Own the end-to-end Supply Chain Risk Management (SCRM) program, focusing on criticality, resiliency, and exposure to drive funding decisions and contingency planning for vendor dependencies.
Role type
Senior IC Supply Chain Risk Lead (Security organization)
Builds
Living dependency maps, exit/contingency plans, risk quantification models (FAIR), and subprocessor governance registers.
Domain
Cybersecurity / Supply Chain Risk Management / Legal Tech
Required skills
Third-party/supply-chain risk program ownership, SaaS/cloud-native risk assessment, automation (scripting/APIs/LLM agents), risk quantification (FAIR), assurance landscape fluency (SOC 2, ISO 27001, GDPR, DORA), AI-in-the-loop judgment
Preferred skills
Assessing AI/LLM providers as dependencies, standing up continuous monitoring functions, experience in legal tech/fintech
Technologies
LLM/agent workflows, APIs, scripting, FAIR models
Responsibilities
Maintain a living dependency map identifying single points of failure; conduct concentration-risk analysis and design exit/contingency plans; detect use-case drift and manage subprocessor governance; orchestrate AI agents for evidence gathering and triage; report risk reduction metrics to leadership.
Seniority
Senior, hands-on IC
