Senior SCRM Analyst

Job Description
We connect our employees with some of the best opportunities around.

Timeand again, our employees tell us that the most important thing we offeris respect.Federal Staffing Solutions puts people to work in alltypes of jobs.When you work with us, you build a relationship with ateam of employment professionals in your community who have, in turn,built professional relationships with the businesses that are hiring.

We are looking for a Senior SCRM Analyst to work in Washington, DC. supporting our client.

Clearance: Public Trust or able to obtain

Salary: $135,000- $150,000

Job Description:

The Senior Cybersecurity Supply Chain Risk Management (SCRM) Analyst supports a Federal Agency by managing cybersecurity risks across the Agency's complex, Interconnected Information, Communications, and Operational Technology (ICT/OT) supply chain. This role helps ensure that ICT/OT products and services remain secure, reliable, and resilient throughout their lifecycle. Responsibilities include reviewing procurement documentation, evaluating supplier risk, and identifying Cyber Information Security Agency (CISA) Known Exploited Vulnerabilities (KEV) to prioritize remediation of actively exploited supply chain vulnerabilities that guide procurement decisions or asset redirection.

Requirements:

• U.S.Citizenship is required
• Must haveor be able to receive a Public Trust
• Candidate must live in the Washington, D.C., metropolitan area. The position requires working onsite for three days and remotely two days in Washington, D.C.

Qualifications and Experience:

• Bachelor'sdegree in computer science from an accredited institution, Cybersecurity,or related field (Master's degree preferred).
• 8+years of experience in cybersecurity, risk management, or supply chainanalysis. Equivalent combinations of experience, certifications, ordemonstrated prior work may substitute for formal experience.
• Certifications:CISSP, CISSM, AWS Certified Security, Azure Security Engineer Associate,Security+, Network+ or equivalent IT certifications (preferred)

Responsibilities:

• Establishthe context for risk-based decisions identify, assess, and mitigatecybersecurity risks of supply chain compromise-both intentional andunintentional.
• Reviewand interpret criticality, threat, vulnerability, likelihood, impactassociated with the distributed and interconnected nature of information,communications, and operational technology ICT/OT product and servicesupply chains.
• Ensurethe integrity, security, quality, and resilience of the supply chain andits products and services.
• Developdetailed technical vulnerability reports for ICT products and"as-a-service" procurements.
• Identifyareas where existing security policies and procedures require updates orwhere new ones should be developed.
• Providesubject matter expertise on Configuration Control Boards (CCB) andEngineering Review Boards to contribute to the creation of securityarchitecture standards for the adoption of new technologies.
• Identify,quantify, and recommend mitigation actions for security risks impactingenterprise projects.
• Producemanagement reporting, monitor risk exposure and the effectiveness ofmitigating risk on an ongoing basis, including tracking changes to aninformation system or supply chain using effective enterprisecommunications and a feedback loop to stakeholders and vendors forcontinuous improvement.

Equal Opportunity Employer