Electronics Supply-Chain Cyber-Resilience Adviser

The mandate

The risk committee keeps asking how much electronics supply-chain cyber exposure should be tolerated when sensitive engineering information and operational continuity depend on external access. A supplier questionnaire may establish process maturity without proving that access can be constrained or service restored. The adviser will test the evidence behind that difference and help the committee make proportionate choices.

Four days monthly cover supplier-risk paper review, security and engineering interviews, and a written challenge meeting. Risk committee attendance is included, with evidence delivered a week ahead. Urgent advisory requests receive acknowledgement within one working day and an answer within three when records are available. Incident command and live supplier access approval are not part of the reserved advisory time.

The nine-month review term begins on 19 October 2026. Renewal must be approved by the risk committee chair against remaining supply-chain decisions, the adviser’s independence and the retained team's ability to sustain challenge. Bengaluru is the coordinating base, using scheduled India workshops and remote preparation; additional supplier-site diligence needs separate consent and scope.

Supply-chain challenge gives the adviser no line authority over procurement, engineering or security and no executive responsibility for supplier acceptance or operational response. Executives decide whether a dependency is commercially necessary and whether its residual risk is acceptable. Advice should identify practical options, their evidence and the tradeoff between restricting access and maintaining reliable manufacturing support.

Concurrent advisory work can continue outside competing suppliers or manufacturing programmes. An undisclosed supplier investment, a paid assurance engagement for the same provider or an implementation retainer dependent on the recommendation creates a conflict. Before reviewing records, the adviser must disclose such relationships, accept recusal and respect information barriers. Independence cannot be assumed merely because the engagement is part-time.

What you will own

• Test supplier access proposals for necessity, scope and revocation evidence, distinguishing commercial convenience from a dependency that genuinely supports manufacturing continuity.
• Question supplier assurance claims against specific engineering-information exposure and the controls that can be verified rather than relying solely on questionnaire maturity scores.
• Shape dependency comparisons showing concentration risk, substitution options and the evidence needed before accepting prolonged reliance on a critical external information service.
• Press security and procurement owners to define time-limited exceptions, compensating controls and the actual executive authority for accepting residual supplier-related exposure.
• Challenge resilience papers on witnessed recovery, access withdrawal and alternative-service readiness, identifying assumptions that have never been exercised in a realistic manufacturing context.
• Recommend committee review triggers for changing suppliers, connectivity or data-sharing scope, keeping acceptance and implementation responsibility with authorised internal owners.

Candidate qualifications

• Demonstrate senior information-security leadership with verifiable responsibility for enterprise risk and external dependency decisions. Provide a manufacturing or engineering-information example where supplier assurance was insufficient, identify the evidence you requested and explain the decision you influenced. A chronological career record must substantiate the leadership depth claimed.
• Show practical expertise in supplier access, information protection and cyber resilience, including how contractual commitments and technical controls interact. Describe a case where access restrictions or recovery requirements changed a commercial relationship, and distinguish your security judgement from procurement negotiation and legal advice.
• Bring experience translating technical dependency into risk committee choices under imperfect evidence. Provide a paper or recommendation that made concentration, substitution and residual exposure visible without reducing everything to a single score. The role does not assume plant-safety or specialised OT engineering authority; limitations and specialist involvement should be explicit.
• Prove independence in advisory or security assurance work through a supplier, investment or implementation conflict you handled. Disclose relevant current relationships and explain how you maintain the four-day monthly cadence. The adviser must preserve confidential engineering information and leave supplier approval, production decisions and incident execution with retained executives.

Application

Applications for this mandate are received in one way only: through the India Board Terminal's application process. It is automated end to end. Your Executive Passport travels to the mandate holder in its confidential form, your answers to the three questions below are read before anything else in your file, and every stage that follows is recorded on your applications page.

There is no address to write to and no intermediary to call. The mandate holder reads what the Terminal delivers and nothing else, which is what keeps the process the same for every applicant and keeps your name out of it until you release it. Applications close on 13 October 2026. Mandate reference PCT-ADV-2026-IND-48.