Software Supply Chain Security Manager

If you are a professional in Software Supply Chain Security or Cyber Security looking for an opportunity to grow, Emerson has an opportunity for you! In our Shakopee MN facility or in our Boulder CO, facility, we are hiring for the role of Software Supply Chain Security Manager. This role is vital to ensure that the software components used across Emerson’s products meet the highest standards of security, compliance, and integrity. You will lead technical and strategic engagement with software suppliers, service providers, and open-source communities to proactively manage risks and drive supply chain transparency throughout the product lifecycle. In This Role, Your Responsibilities Will Be:

• Vendor and Third-Party Software Oversight
  • Lead supplier reviews to improve service levels, costs, and program support. 
  • Manage and update supplier scorecards and eliminate underperforming suppliers. Develop a framework for assessing and monitoring vendors for security and compliance, collaborating across Procurement, Legal, and Engineering to set security requirements. 
  • Ensure adherence to secure practices and define risk management KPIs.
• Design for Supply Chain:
  • Engage in software sourcing reviews and new product development, supporting design changes and implementation
• Software Supply Chain Security
  • Assess risks from open-source and commercial software, oversee approval processes using a centralized analysis system, and support vulnerability management for supply chain threats.
• SBOM Management and Transparency
  • Guide vendors in providing compliant SBOMs, collaborate on tools to verify this data, and ensure compliance with regulations like the EU Cyber Resilience Act.
• Compliance and Assurance
  • Lead efforts to ensure adherence to global standards, conduct audits, and build an Emerson supplier assurance program incorporating security controls.
• Cross-Functional Collaboration
  • Act as an expert in vendor risk management, supporting various departments, and advising on secure software integration and management.

  Who You Are: You readily action new challenges, without unnecessary planning. You provide timely and helpful information to individuals across the organization. You show a clear connection between people’s motivators and organizational goals. You deal constructively with problems that do not have clear solutions or outcomes. You identify and create the necessary processes to get work done.
  For This Role, You Will Need:

• Bachelor’s degree in computer science, Cybersecurity, Supply Chain Management, or a related discipline
• Minimum of 4+ years’ experience in software supply chain, product cybersecurity, or third-party risk management
• Strong skills in communication, negotiation, and collaboration, with experience managing vendor relationships and familiarity with SCA tools and SBOM standards
• Ability to travel up to 20%
• Legal authorization to work in the United States

  Preferred Qualifications That Set You Apart:

• Experience in industrial automation, medical devices, or embedded product sectors.
• Oracle ERP/MRP knowledge.
• Proven ability to influence others as needed when resources are at a premium to complete required tasks.
• Hands-on knowledge of software provenance, artifact signing, or SLSA levels
• Familiarity with regulatory frameworks including EU CRA, U.S. EO 14028, and IEC 62443.
• Working knowledge of DevSecOps practices and CI/CD pipeline integration.
• Professional certification (C.P.M. or APICS) or equivalent strongly desired.

  Our Culture & Commitment to You:

At Emerson, we prioritize a workplace where every employee is valued, respected, and empowered to grow. We foster an environment that encourages innovation, collaboration, and diverse perspectives—because we know that great ideas come from great teams. Our commitment to ongoing career development and growing an inclusive culture ensures you have the support to thrive. Whether through mentorship, training, or leadership opportunities, we invest in your success so you can make a lasting impact. We believe diverse teams, working together are key to driving