Nonexecutive Director for Technology Supplier and Cyber Assurance

A specialist oversight seat

The role requires executive technology experience plus demonstrable cyber or technology risk oversight; ability to interpret independent specialist assurance.

Critical dependencies to examine

1. Challenge management’s understanding of critical supplier dependencies and the impact of supplier failure.

2. Review procurement and contract decisions for concentration, switching costs and assurance commitments.

Assurance and incident readiness

You will test whether cyber reporting connects technical findings with business interruption and customer consequences. You will scrutinise supplier incident escalation and the evidence supporting resilience claims.

You will support board access to specialist assurance where technical questions exceed directors’ own expertise.

First year priorities

• First quarter: establish a board-level map of critical suppliers and assurance gaps.
• Within six months: review the most consequential supplier relationship and management’s response to identified weaknesses.
• Within twelve months: assess whether assurance coverage, exit readiness and unresolved supplier risks have improved.

Additional perspective

Additional useful experience includes risk committee service, supplier governance leadership or recognised cyber governance training supported by practical oversight experience.

Collective board responsibility

This is a nonexecutive appointment. The director contributes through the chair to collective board decisions and oversight; management retains responsibility for execution.

An initial three-year appointment is envisaged, with approximately eighteen to twenty-four days annually for meetings, preparation and committee work. Start date, remuneration, travel and on-site attendance will be agreed for the appointment.