采购经理 – 网络安全
Procurement Manager – Cybersecurity
采购经理 – 网络安全
部门：信息安全 / 供应链 / IT 采购
**合同类型**
职位概述：
网络安全采购经理负责寻找、评估和管理提供网络安全解决方案、软件和服务的供应商。该职位确保所有技术采购符合组织的安全策略、预算和合规要求。经理与IT、法务和财务团队合作，协商合同，降低供应链风险，并保持良好的供应商绩效和安全标准。
主要职责：
战略采购与供应商管理
- 制定并执行网络安全工具、服务和基础设施（如防火墙、端点保护、SIEM、威胁情报、云安全和托管安全服务）的采购策略。
- 识别、评估并引入网络安全供应商和技术提供商。
- 与供应商协商价格、许可和服务水平协议（SLAs），重点关注价值、性能和安全合规性。
- 维护供应商风险管理框架，评估供应商的安全态势和合规性。
合同与合规
- 与法务和信息安全团队合作，起草和审核与网络安全相关的合同、保密协议和数据保护协议。
- 确保所有采购符合网络安全标准，如NIST、ISO 27001、SOC 2、GDPR、HIPAA或其他相关法规。
- 监督供应商绩效，定期进行审计，并确保遵守合同和网络安全义务。
预算与成本优化
- 管理网络安全采购预算和预测。
- 通过批量许可、合同整合和供应商谈判评估节省成本的机会。
- 跟踪网络安全工具和订阅的总拥有成本（TCO）。
协作与领导力
- 与IT、安全运营、风险管理及财务团队合作，支持组织的安全计划。
- 领导和指导IT或网络安全领域的采购分析师或专家。
- 跟踪新兴的网络安全产品、供应商和市场趋势。
任职资格：
- 教育背景：供应链管理、信息技术、网络安全、工商管理或相关领域的学士学位。
- 工作经验：5–8年采购或供应链管理经验，其中至少3年专注于网络安全领域。
查看英文原文
Procurement Manager – Cybersecurity
Department: Information Security / Supply Chain / IT Procurement
**Contract**
Job Summary:
The Procurement Manager – Cybersecurity is responsible for sourcing, evaluating, and managing vendors that provide cybersecurity solutions, software, and services. This role ensures that all technology acquisitions align with the organization’s security strategy, budget, and compliance requirements. The manager collaborates with IT, legal, and finance teams to negotiate contracts, mitigate supply chain risks, and maintain strong vendor performance and security standards.
Key Responsibilities:
Strategic Sourcing & Vendor Management
- Develop and execute procurement strategies for cybersecurity tools, services, and infrastructure (e.g., firewalls, endpoint protection, SIEM, threat intelligence, cloud security, and managed security services).
- Identify, evaluate, and onboard cybersecurity vendors and technology providers.
- Negotiate pricing, licensing, and service level agreements (SLAs) with a focus on value, performance, and security compliance.
- Maintain a vendor risk management framework to assess supplier security posture and regulatory compliance.
Contracting & Compliance
- Collaborate with Legal and Information Security teams to draft and review cybersecurity-related contracts, NDAs, and data protection agreements.
- Ensure all procurements comply with cybersecurity standards such as NIST, ISO 27001, SOC 2, GDPR, HIPAA, or other relevant regulations.
- Monitor vendor performance, conduct periodic audits, and ensure adherence to contractual and cybersecurity obligations.
Budgeting & Cost Optimization
- Manage cybersecurity procurement budgets and forecasts.
- Evaluate cost-saving opportunities through volume licensing, contract consolidation, and supplier negotiation.
- Track total cost of ownership (TCO) for cybersecurity tools and subscriptions.
Collaboration & Leadership
- Partner with IT, Security Operations, Risk Management, and Finance to support organizational security initiatives.
- Lead and mentor procurement analysts or specialists within the IT or cybersecurity domain.
- Stay updated on emerging cybersecurity products, vendors, and market trends.
Qualifications:
- Education: Bachelor’s degree in Supply Chain Management, Information Technology, Cybersecurity, Business Administration, or related field.
- Experience: 5–8 years in procurement or supply chain management, with at least 3 years focused on technology or cybersecurity procurement.
- Certifications (Preferred):
- Procurement: CPSM, CIPS, or CPM
- Cybersecurity: CISSP, CISM, or Security+
- Vendor Risk Management: ISO 27036 or similar
Skills & Competencies:
- Deep understanding of cybersecurity products, licensing models, and vendor ecosystems.
- Strong contract negotiation and vendor risk assessment skills.
- Knowledge of information security and data privacy regulations.
- Proficiency in ERP and procurement software (e.g., SAP Ariba, Coupa, ServiceNow).
- Excellent analytical, communication, and leadership abilities.
Excellent analytical, communication, and leadership abilitiesOriginally posted on Himalayas