Supply Chain Risk Management Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Perform proactive threat assessments of foreign suppliers, third-party software developers, and hardware manufacturers to detect nation-state activities and strategic threat trends aimed at the FAA.

• Employ OSINT and corporate registries to evaluate potential FAA vendors and analyze the supply chain for indicators of Foreign Ownership, Control, or Influence (FOCI), foreign partnerships, and risks associated with technology transfer.

• Track specialized threat feeds, nation-state actions, and geopolitical changes to identify, assess, and mitigate strategic supply chain risks impacting the FAA.

• Contribute to the FAA Insider Risk Program by identifying and examining personnel issues, unusual vendor behaviors, and internal vulnerabilities.

• Assess threat vectors such as malicious modifications to hardware or software, supply chain transit disruptions, and counterfeit electronic components.

• Integrate complex data to create clear, actionable Supplier Threat Profiles, Country Risk Profiles, link-analysis diagrams, and timely threat alerts/advisories for FAA program managers, technical teams, and executive decision-makers.

• Develop performance metrics and program reports for the executive leadership team.

• Sustain essential operational and collaborative relationships with external stakeholders, including the FAA Chief Information Officer (CIO), Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Department of Homeland Security (DHS), and the wider Intelligence Community (IC).

• Organize and lead SCRM training and awareness initiatives for acquisition personnel and program offices.

⛳️ Requirements

• Citizenship: Must be a U.S. Citizen.

• Clearance: An active Top Secret/SCI clearance is mandatory.

• Education: Bachelor’s degree in Supply Chain, Intelligence Studies, National Security, Logistics, Data Science, Cybersecurity, Information Technology, Computer Science, Computer Engineering, or a related technical field.

• Experience: Over 8 years of professional experience as an Intelligence Analyst (All-Source, Cyber, Counterintelligence, or OSINT) or relevant experience in third-party risk management (TPRM), Cyber Supply Chain Risk Management (C-SCRM), technical risk assessments, IT auditing, cybersecurity risk management, or infrastructure defense in a federal or highly regulated commercial setting.

• Analytical Capability: Demonstrated experience using corporate registries, commercial databases, and OSINT techniques to investigate corporate structures, trace components, and assess FOCI.

• Technical Skills: Expertise with due diligence or corporate intelligence platforms (e.g., Sayari, Altana, Interos, Maltego) and/or data modeling.

• Communication Skills: Proven ability to convert complex intelligence and technical risk data into clear, concise executive summaries and formal written reports for non-technical audiences.

🏝️ Benefits

• Health and Wellness programs

• Income Protection

• Paid Leave

• Retirement