Cyber-attacks are among the most threatening risks to modern organizations and supply chains. Amplified by the growing digitalization through the technologies of Industry 4.0, cybersecurity has become an essential part of modern risk management. While security in cyberspace has been considered a solely technological task, the role of interdisciplinary approaches has become increasingly important. Cyber-attacks often originate from partners within the supply chain, therefore, holistic approaches beyond one's organization are paramount. In this context, procurement is one of the most essential business functions in targeting cyber threats originating from suppliers. To consolidate our understanding of the role of procurement in cybersecurity, this study conducts a systematic literature review aligning the findings with the traditional procurement process. Subsequently, a research agenda is presented to highlight different avenues for future research.