Senior Cybersecurity Supply Chain Risk Management (SCRM) Analyst #1809720 at Network Designs, Inc. in Washington, DC, USA

Job description

• The Senior Cybersecurity Supply Chain Risk Management (SCRM) Analyst supports the Agency's Office of the Chief Information Officer (OCIO) and its information, communications, and operational technology (ICT/OT) users who rely on a complex, globally distributed, and interconnected supply chain ecosystem to provide highly refined, cost-effective, and reusable solutions. This role supports the management of cybersecurity risks associated with ICT/OT products and services and helps ensure their security, integrity, quality, and resilience.
• The position requires adept utilization of multiple FBI systems used to gather and analyze moderate-to-complex procurement documentation and justifications for high-risk ICT/OT products and services. The position supports tiered supply chain risk management determinations that result in procurement or redirection of assets.

Responsibilities

• Provide analytical support to manage the increasing risk of supply chain compromise related to cybersecurity, whether intentional or unintentional.
• Identify, assess, and mitigate risks associated with the distributed and interconnected nature of ICT/OT product and service supply chains.
• Ensure the integrity, security, quality, and resilience of the supply chain and its products and services.
• Create detailed technical vulnerability reports for ICT products and assigned technical "as-a-service" procurements.
• Recognize and identify potential areas where existing security policies and procedures require change or where new ones need to be developed, especially regarding future business expansion.
• Provide information security subject matter expertise to technology teams and enterprise projects.
• Create security architecture standards for the adoption of new technologies.
• Identify, quantify, and recommend mitigation actions for security risks as they relate to enterprise projects.
• Produce management reporting, including appropriate metrics that inform senior leadership as to the state of information risk and exposure.
• Understand security product and service cost drivers and industry and business trends impacting the Agency's information security program.

Requirements

• U.S. Citizenship is required
• Must possess an active TS clearance at the time of application, be willing and able to obtain SCI access, and pass a CI polygraph.
• This position is onsite 5/days a week in Washington D.C.
• Bachelor's degree from an accredited institution in computer science, business management, or an IT-related discipline is preferred.
• 8+ years of experience in cybersecurity, risk management, or supply chain analysis is recommended. Equivalent combinations of experience, certifications, or demonstrated prior work may be used to demonstrate the level of experience needed to perform at this level.
• Certifications: Network+ and Security+ or equivalent IT certifications (preferred)

Skills

Required

• U.S. Citizenship
• Active TS clearance
• Pass a CI polygraph

Preferred

• Network+ certification
• Security+ certification
• Equivalent IT certifications

Benefits

• At NDi, we value our team and are committed to retaining top talent by offering competitive benefits and compensation packages. Our employee benefits package includes comprehensive health, dental, vision, pet, and legal insurance. Our corporate benefits include 401(k) retirement matching, paid leave, paid holidays, and health and wellness programs. In addition, we provide employer-paid life and disability insurance, professional development, education benefits, and much more to ensure our team has the resources they need to thrive on and off the job.