Supply Chain Risk Management Analyst (SCRM)

Supply Chain Risk Management Analyst (SCRM)

Duration: Contract through approximately February 2027
Location: 100% Onsite – Fort Meade, Maryland
Schedule: Monday–Friday, 9:00 AM–5:00 PM (flexible start as early as 7:00 AM)

Key Responsibilities

• Support and mature an end-to-end IT/ICT Supply Chain Risk Management (SCRM) program.

• Develop and update SCRM policies, procedures, and risk management processes.

• Conduct supply chain risk assessments and evaluate potential foreign influence and threats.

• Support assessments of networks, hardware, software, and mission-critical technology.

• Develop RFIs, risk assessment reports, briefings, meeting minutes, and other program documentation.

• Support implementation of SCRM strategies, training, processes, and performance metrics.

• Work with senior stakeholders to gather requirements and develop security and risk management documentation.

Required Qualifications

• Must be able to obtain the required U.S. Top Secret security clearance.

• 8+ years of relevant experience; Bachelor's degree preferred or equivalent experience.

• Strong knowledge of DoD SCRM standards, including DoDI 5200.44 and NIST 800-161.

• Experience in cybersecurity, supply chain risk management, and/or risk assessment.

• Strong communication and stakeholder-management skills.

• Experience with project management and security/risk documentation.

Preferred

• Master's degree in Supply Chain Management, Engineering, Cybersecurity, or a related technical field.

• PMP or relevant project management experience.

• CISSP, CASP, or other cybersecurity certifications.

• Experience with systems engineering disciplines such as requirements, risk, schedule, and readiness.