Sr. Risk Management Analyst

Risk Management Executive

The Risk Management Executive / Threat Mitigation Division’s mission is to reduce risk to Strategic Mission by identifying and assessing assets and vulnerabilities to DISA provided mission critical infrastructure, ensuring availability and reliability to the Combatant Commands, Services, Agencies, and Mission Partners. This individual will collaborate directly with government customers in the creation of policy, processes, and implementation of appropriate Supply Chain Risk Management infrastructure to continuously assess, mitigate, and minimize risk to the Department’s security and to the overall mission. The role will report directly to the Information Technology and Communications Supply Chain Risk Management (ICT-SCRM) Program Team Lead.

This position is located in Ft. Meade, Maryland.

Primary Responsibilities:

• Provide subject matter expertise in DoD ICT-SCRM to implement, expand, and mature an end-to-end ICT-SCRM program.
• Support the development and continued refinement/updates of Risk Management policy.
• Produce and present briefings of their findings, as well as meeting minutes, after action reports, trip reports, as necessary
• Support ICT-SCRM Commercial Assessments of Networks, Network availability, and germane hardware and software to protect DoD's mission critical functions.
• Conduct evaluations and prepare reports detailing any potential foreign influence or threats to DISA and/or DoD supply chains.
• Risk assessment products shall be prepared in accordance with guidance from the DISA lead, in accordance with DISA ICT-SCRM Standard Operating Procedures (SOPs) and Concept of Operations (CONOPS).
• Gather requirements and develop ICT-SCRM RFIs.
• Support the implementation of DISA ICT-SCRM processes and policies
• Support periodic collection of ICT-SCRM internal process metrics in accordance with DISA’s ICT-SCRM SOPs/CONOPS.
• Support the implementation of the DISA ICT-SCRM program strategy, ICT-SCRM training, ICT-SCRM procedures, and other support related to supply chain risk management.

Basic Qualifications:

• Active TS/SCI security clearance prior to start
• Bachelor's Degree and 8+ years’ experience; additional relevant experience may be substituted in lieu of degree.
• Extensive knowledge of DoD SCRM standards, including DoDI 5200.44, NIST 800-161
• Demonstrated ability to communicate with senior government customers and the ability to influence within multiple levels of the organization
• Host customer engagements to drive requirements and develop system security plans including, security concepts of operation, risk management matrix, security control traceability matrix, security test procedures, and plan of action and milestones
• Cybersecurity experience
• Project Management fundamentals
• Good oral and written skills

Preferred Qualifications:

• Master’s degree in supply chain management, engineering, cybersecurity, or other technical discipline
• Project Management Experience or PMP certification.
• Experience with core Systems Engineering Disciplines (Requirements, Schedule, Risk, Readiness, System Closure, etc.)
• Certifications in Cybersecurity like CISSP or CASP are strongly preferred.