Position Title: Supply Chain Leader, COI
Reports To: EVP, Global Community Engagement
Job Type: Full-time (40 hours/week)
Work Location: Remote
Expected Travel: 20% domestic/international
OUR MISSION
To advance the cybersecurity and resilience of the global financial system.
OUR CULTURE
At FS-ISAC, how we work matters as much as what we do. We believe in:
- Strengthening collaboration across FS-ISAC, its membership, and strategic partners.
- Teamwork and collective success.
- Humility and curiosity to grow, learn, and continuously improve.
- Role modeling a culture of open, constructive feedback – both giving and receiving.
- Acting with integrity and accountability, upholding our policies, and making principled decisions that reflect our commitment to doing what is right.
POSITION SUMMARY
The Supply Chain Community of Interest Leader is responsible for developing and advancing FS-ISAC’s Supply Chain Community of Interest, bringing together financial-sector members, industry partners, and subject matter experts to address emerging supply chain security risks and strengthen the resilience of the global financial system.
This role develops and executes the community’s engagement strategy, facilitates practitioner collaboration, and translates member priorities and emerging threats into relevant discussions, actionable insights, and practical resources. Working across FS-ISAC’s Threat Intelligence, Response & Resilience, and Proactive Security functions, the leader ensures the community delivers meaningful value to members while advancing organizational priorities.
KEY RESPONSIBILITIES
Community Strategy and Leadership
- Develop and execute a strategic roadmap for the Supply Chain Community of Interest aligned with FS-ISAC’s mission, organizational priorities, and member needs.
- Establish community objectives, engagement priorities, and measurable outcomes that demonstrate value to members and the organization.
- Build and sustain an active, trusted network of financial sector practitioners and subject matter experts focused on supply chain security and resilience.
- Identify industry trends, and opportunities to expand the community’s relevance and impact.
- Partner with EVP, Global Community Engagement to establish priorities, assess performance, and continuously improve community programming.
Member Engagement and Collaboration
- Facilitate meaningful peer-to-peer engagement among member organizations, encouraging the exchange of experiences, practices, and lessons learned.
- Build relationships with member representatives across cybersecurity, third-party risk management, procurement, operational resilience, and related disciplines.
- Plan and facilitate virtual and in-person community meetings, roundtables, working groups, and other collaborative activities.
- Identify opportunities for members to share expertise, contribute resources, and collaborate on common supply chain security challenges.
- Foster an inclusive, member-focused environment that supports candid discussion, constructive collaboration, and trusted information sharing.
- Identify and engage subject matter experts and industry partners whose participation strengthens community outcomes.
Cross-Functional Collaboration
- Partner with Threat Intelligence, Response & Resilience, Proactive Security, Events, and other internal teams to align community activities with FS-ISAC priorities.
- Coordinate with internal subject matter experts to connect members with relevant intelligence, resources, programming, and expertise.
- Identify opportunities to integrate supply chain security considerations into broader FS-ISAC initiatives and cross-community collaboration.
- Support the development of content and programming for member events, webinars, conferences, and other organizational initiatives.
- Represent the Supply Chain Community of Interest in internal planning discussions and relevant external industry forums.
Program Operations and Performance
- Maintain appropriate documentation of community activities, priorities, outputs, and follow-up actions.
- Support the development of presentations and reports communicating community progress, key themes, emerging priorities, and member value.
POSITION REQUIREMENTS
Required
- 8+ years of relevant professional experience in supply chain security, third-party risk management, financial services, cybersecurity, operational resilience, technology risk, or a closely related field.
- Demonstrated understanding of supply chain risk management, including third-party dependencies, supplier security, technology and software supply chain risks, and associated resilience challenges.
- Experience developing and managing collaborative programs, professional communities, working groups, or cross-functional initiatives.
- Demonstrated ability to engage senior practitioners and subject matter experts, build productive relationships, and facilitate discussions among diverse stakeholders.
- Strong written and verbal communication skills, including the ability to translate complex
security and risk topics into clear, relevant, and actionable information.
- Experience planning and facilitating meetings, workshops, webinars, roundtables, or similar professional engagement activities.
- Strong organizational and project management skills, with the ability to manage competing priorities and deliver results in a distributed, collaborative environment.
- Ability to work effectively across functions and influence outcomes without relying on direct authority.
- Demonstrated commitment to collaboration, professional integrity, and member-focused service.
Preferred
- Experience working within the financial services industry or supporting financial institutions and their cybersecurity, risk management, or resilience programs.
- Familiarity with financial sector information sharing, industry associations, or trusted practitioner communities.
- Knowledge of third-party risk management frameworks, software supply chain security, critical infrastructure dependencies, and systemic supply chain risks.
- Experience developing practitioner guidance, industry resources, research, or educational programming.
- Relevant professional certifications in cybersecurity, supply chain risk management, information security, or third-party risk management.
WORK ENVIRONMENT
Employees residing in the Northern Virginia/Washington, D.C. area are expected to work from the Reston, VA office at least two days per week.
Employees are expected to maintain a professional and safe work environment and be able to perform the essential functions of the role. Reasonable accommodation may be made to enable individuals with disabilities to perform these functions.
This job description is intended to describe the general nature and level of work performed and is not an exhaustive list of all responsibilities, duties, or skills required. Responsibilities may be modified or assigned as business needs evolve.
COMPENSATION AND PAY TRANSPARENCY DISCLOSURES
Full-Time Annual Salary Range:($155,000 - $180,000 USD) Individual salaries are determined by a variety of factors including, but not limited to, business considerations, geographical location, teams local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience.
Incentive Compensation: This position is eligible to participate in the organization’s discretionary annual incentive/bonus plan subject to plan terms in addition to individual and organizational performance.
Benefits: Medical, dental, vision, life insurance, disability coverage, and accident insurance, 401(k) with employer match, paid time off, paid holidays, parental leave, along with other types of leave, and professional development opportunities. Other incentives may be available based on position level.
