Sr. Cyber Supply Chain Risk Management Analyst

{
  "content_hash": "cb0be9dbe9594dcebd40305c097f2d20168f13094c9a5320783f016559e28b11",
  "source_hash": "f0a1f2d832b7869ce7fd740d1bd9dcc43f17f96f7f79a3a98422523f7584e40e",
  "last_changed_at": "2026-06-06T08:40:43.070Z",
  "active_status": "active"
}

{
  "language": "en",
  "location": {
    "raw": "Springfield, VA, US",
    "city": "Springfield",
    "region": "VA",
    "country": "United States",
    "is_remote": false,
    "confidence": 0.8
  },
  "salary_max": null,
  "salary_min": null,
  "inferred_at": "2026-06-06T08:40:43.066Z",
  "launch_scope": {
    "reason": "english_us_canada",
    "included": true,
    "language": "en",
    "location": {
      "raw": "Springfield, VA, US",
      "city": "Springfield",
      "region": "VA",
      "country": "United States",
      "is_remote": false,
      "confidence": 0.8
    },
    "countries": [
      "United States"
    ]
  },
  "remote_policy": null,
  "salary_period": null,
  "workplace_type": null,
  "salary_currency": null
}

{}

{
  "json_ld": {
    "url": "https://careers-wiscenterprises.icims.com/jobs/1649/sr.-cyber-supply-chain-risk-management-analyst/job",
    "@type": "JobPosting",
    "title": "Sr. Cyber Supply Chain Risk Management Analyst",
    "@context": "http://schema.org",
    "datePosted": "2024-06-06T08:40:42.946Z",
    "description": "<h2>Overview</h2>\n<p>We are seeking a technically proficient Cyber Supply Chain Risk Management (C-SCRM) professional to support U.S. Government stakeholders. The C-SCRM Analyst is responsible for identifying, assessing, and mitigating risks associated with the distributed and interconnected nature of Information and Communications Technology and Operational Technology (ICT/OT) product and service supply chains throughout their entire lifecycle. This includes protecting against malicious functionality, counterfeit components, foreign influence, and vulnerabilities derived from poor manufacturing.</p>\n<h2>Responsibilities</h2>\n<ul>\n <li><strong>Risk Assessments:</strong> Evaluate vendor and supplier security postures (third-party/fourth-party) using frameworks such as NIST SP 800-161.</li>\n <li><strong>Threat Analysis:</strong> Monitor, analyze, and report on supply chain threats (counterfeit, malicious insertion, Tampering).</li>\n <li><strong>Policy Governance & Compliance</strong>: Lead the development, formal documentation, and maintenance of organizational <strong>C-SCRM policies</strong>, Standard Operating Procedures (SOPs), and implementation plans; concurrently monitor and enforce <strong>policy compliance</strong> across the enterprise by conducting systematic audits and risk assessments to ensure alignment with federal mandates such as NIST SP 800-161, DFARS , FAR, and Executive Order requirements.</li>\n <li><strong>Acquisition Support:</strong> Integrate C-SCRM controls into procurement documents, RFPs, and contracts, working alongside acquisition teams.</li>\n <li><strong>Technical Evaluation:</strong> Perform Software Bill of Materials (SBOM) and Hardware Bill of Materials (HBOM) analysis to identify components and vulnerabilities.</li>\n <li><strong>Operationalization:</strong> Develop and maintain C-SCRM policies, procedures, and Standard Operating Procedures (SOPs).</li>\n <li><strong>Incident Response:</strong> Support incident response teams when compromised products are identified.</li>\n <li><strong>Reporting:</strong> Create and present risk briefing materials, dashboards, and metrics to senior leadership. </li>\n <li> </li>\n</ul>\n<h2>Required Qualifications</h2>\n<ul>\n <li><strong>Education & Experience:</strong> Bachelor’s degree in Computer Science, Information Systems, Cyber Security, or Supply Chain Management, plus 2-8+ years of experience in cyber risk or supply chain management.</li>\n <li><strong>Frameworks:</strong> In-depth knowledge of NIST SP 800-161r1-upd1, NIST Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations, and Risk Management Framework (RMF).</li>\n <li><strong>Technical Skills:</strong> Experience implementing NIST and/or DoD C-SCRM policies.  Familiarity with C-SCRM/Third-Party Risk Management tools such as Exiger and eMAS</li>\n <li><strong>Security clearance: </strong>TS/SCI with Poly </li>\n</ul>\n<h2>Desired Qualifications</h2>\n<ul>\n <li><strong>Certifications:</strong> CISSP, CISM, CRISC, or C-SCRM certification.</li>\n <li><strong>Task Management:</strong> Experience with DoD/IC/NGA task management system (e.g. CATMS, NCERTS)</li>\n <li><strong>Domain Expertise:</strong> DoW Cybersecurity Supply Chain Risk Management.</li>\n <li><strong>Communications:</strong> Strong written and verbal communication skills</li>\n <li><strong>Professional Standard:</strong> Ability to execute complex workflows under general direction.  Comfortable in an independent work environment.  Self-directed.</li>\n</ul>",
    "directApply": true,
    "jobLocation": [
      {
        "@type": "Place",
        "address": {
          "@type": "PostalAddress",
          "postalCode": "UNAVAILABLE",
          "addressRegion": "VA",
          "streetAddress": "UNAVAILABLE",
          "addressCountry": "US",
          "addressLocality": "Springfield",
          "postOfficeBoxNumber": "UNAVAILABLE"
        }
      }
    ],
    "validThrough": "2027-06-06T08:40:42.946Z",
    "employmentType": "FULL_TIME",
    "hiringOrganization": {
      "name": "WiSC Enterprises, LLC",
      "@type": "Organization",
      "sameAs": "https://wiscenterprises.com/"
    },
    "occupationalCategory": "Lifecycle Acquisition"
  },
  "detail_meta": {
    "url": "https://careers-wiscenterprises.icims.com/jobs/1649/sr.-cyber-supply-chain-risk-management-analyst/job?in_iframe=1",
    "http_status": 200,
    "content_type": "text/html;charset=UTF-8",
    "response_bytes": 33840,
    "compact_response_bytes": 4749,
    "original_response_bytes": 33840
  },
  "sitemap_job": {
    "id": "1649",
    "url": "https://careers-wiscenterprises.icims.com/jobs/1649/sr.-cyber-supply-chain-risk-management-analyst/job",
    "slug": "sr.-cyber-supply-chain-risk-management-analyst",
    "lastmod": "2026-05-06T15:03:20-04:00"
  },
  "detail_errors": []
}