C-SCRM & Post-Quantum Cryptography Subject Matter Expert (Anticipated Position)

Navanti Group•Arlington, VA

1d•Remote

About The Position

Navanti Group is seeking a senior Cybersecurity Supply Chain Risk Management (C-SCRM) and Post-Quantum Cryptography (PQC) Subject Matter Expert to support a federal customer in strengthening enterprise supply-chain risk management and preparing acquisition processes for emerging cryptographic requirements. The SME will support government stakeholders by improving C-SCRM strategy, vendor-risk assessment processes, risk-scoring methodologies, documentation, implementation guidance, and post-quantum cryptography readiness. This is an anticipated position that has not yet been funded. Navanti Group is soliciting resumes in anticipation of a contract award. The position is remote/virtual and may be full-time or contract. An active Top Secret clearance with SCI eligibility is required.

Requirements

At least 3 years of experience establishing or managing a risk-management program that includes C-SCRM.
Demonstrated experience with cybersecurity supply-chain risk management, supplier/vendor risk, and third-party risk assessment.
At least 3 years of experience working with cryptographic algorithms.
Experience developing cybersecurity or risk-management strategies, frameworks, assessment methodologies, scoring models, SOPs, or implementation guidance.
Experience supporting activities such as C-SCRM strategy, vendor-risk assessments, documentation, questionnaires, scoring, and implementation guidance.
One or more senior cybersecurity/risk certifications such as CISSP, CISM, CRISC, or equivalent.
Strong written and verbal communication skills and the ability to advise senior government stakeholders.
Active Top Secret clearance with SCI eligibility.

Nice To Haves

Direct experience with post-quantum cryptography and federal PQC transition requirements.
Knowledge of NIST SP 800-161 and related federal C-SCRM guidance.
Experience supporting federal acquisition, procurement, or GSA environments.
Experience developing supplier-risk scoring methodologies or technology/vendor assessment frameworks.
Experience translating technical cybersecurity risk into acquisition or executive decision-support products.
Hands-on C-SCRM program experience, deep cybersecurity risk-management expertise, and meaningful cryptographic experience.

Responsibilities

Develop and refine an enterprise C-SCRM strategy and implementation plan.
Assess existing supplier and vendor risk-management processes and recommend improvements.
Develop standardized C-SCRM risk frameworks, methodologies, guides, and operating procedures.
Review and improve vendor-risk questionnaires, scoring criteria, and assessment methodologies.
Analyze post-quantum cryptography readiness within a federal acquisition environment.
Develop a PQC readiness roadmap aligned with NIST and applicable federal cybersecurity guidance.
Advise government stakeholders on cryptographic algorithms, modernization requirements, and emerging PQC risks.
Support development of repeatable processes for identifying, assessing, documenting, and mitigating cybersecurity supply-chain risks.
Translate complex cybersecurity, supplier, and technology risks into practical acquisition and risk-management decisions.
Support project management, quality management, status reporting, and transition activities.