Supply Chain Risk Management Specialist

This is a fully remote position, open to applicants in United States.

📋 Description

• Perform vendor risk assessments and technical security evaluations at an enterprise level for software suppliers, cloud services, AI tools, telecommunications, and OT/ICS environments.

• Execute both technical and non-technical risk scoring and generate detailed Vendor Risk Reports.

• Offer subject matter expertise in Supply Chain Risk Management (SCRM) throughout the entire procurement lifecycle, including acquisition planning and source selection processes.

• Compose Acquisition Security Reviews and evaluation matrices for the FAA Acquisition Management System pipeline.

• Draft security language for contracts, technical security requirements, and recommendations for risk acceptance.

• Convert complex risk assessment data into Executive Decision Packages intended for FAA senior leadership.

• Contribute to the development of FAA SCRM policies, governance documentation, and Standard Operating Procedures (SOPs).

• Create performance metrics and program reports for executive leadership.

• Sustain relationships with the FAA CIO, CISA, FBI, DHS, and the Intelligence Community.

• Organize and lead SCRM training and awareness initiatives.

⛳️ Requirements

• U.S. Citizenship is mandatory.

• An active Top Secret/SCI clearance is required.

• A Bachelor’s degree in Supply Chain Risk Management, Intelligence Studies, National Security, Logistics, Data Science, Cybersecurity, Information Technology, Computer Science/Engineering, or a similar field.

• Equivalent professional experience or specialized training may be considered as a substitute.

• Over 8 years of professional experience as an Intelligence Analyst (All-Source, Cyber, Counterintelligence, or OSINT) or in third-party risk management (TPRM), Cyber Supply Chain Risk Management (C-SCRM), technical risk assessments, cybersecurity risk management, or infrastructure defense.

• Strong familiarity with NIST SP 800-161 and NIST SP 800-53 standards.

• Practical experience in assessing the security posture, software supply chains, and configurations of at least three specific technology profiles.

• Demonstrated ability to translate intricate technical vulnerabilities, software flaws, and architectural risks into clear, well-organized, non-technical written reports and executive summaries.

• Completion of formal military or federal intelligence training courses focusing on threat network analysis or open-source collection is preferred.

• Possession of CISSP, CRISC, CISA, or specialized federal SCRM/Counterintelligence training certifications is preferred.

• Proficiency in advanced OSINT search techniques, corporate filing retrieval systems, or international trade/shipping databases is preferred.

• Proven experience in reviewing federal procurement mechanisms, source selection processes, or drafting contract security language is preferred.

🏝️ Benefits

• Comprehensive health, dental, and vision insurance.

• Generous retirement savings plan with employer contributions.

• Flexible work schedules and remote work options.

• Opportunities for professional development and training.

• Paid time off and holidays.