JobMesh

Sr. Supply Chain Risk Management Analyst

WiSC Enterprises · Springfield, Virginia, US

Overview We are seeking a technically proficient Supply Chain Risk Management (SCRM) professional to support U. S. Government stakeholders in identifying, as...

Job description

Overview We are seeking a technically proficient Supply Chain Risk Management (SCRM) professional to support U.S. Government stakeholders in identifying, assessing, and mitigating cyber and emerging technology risks across the supply chain.The C-SCRM Analyst is responsible for identifying, assessing, and mitigating risks associated with the distributed and interconnected nature of Information and Communications Technology and Operational Technology (ICT/OT) product and service supply chains throughout their entire lifecycle. This includes protecting against malicious functionality, counterfeit components, foreign influence, and vulnerabilities derived from poor manufacturing. This role functions as a technical action officer, supporting government-led discussions with vendors and internal stakeholders. The ideal candidate can interpret complex technical conversations (cybersecurity, AI/ML), validate vendor claims, and translate risks into clear, actionable insights. Responsibilities: - Risk Assessments: Evaluate vendor and supplier security postures (third-party/fourth-party) using frameworks such as NIST SP 800-161. - Threat Analysis: Monitor, analyze, and report on supply chain t...