Hybrid SCRM Analyst (Intelligence Analyst 4) - 30737

HII•Woodlawn, MD

2d•Hybrid

About The Position

HII Mission Technologies is seeking a senior Supply Chain Risk Management (SCRM) Intelligence Analyst to support SCRM efforts for the Centers for Medicare & Medicaid Services (CMS) and the Department of Health and Human Services (HHS). The analyst will lead, coordinate, manage, and evaluate focused cyber assessments and analysis, working with CMS leadership, program personnel, and government partners to support mission objectives. The role includes producing intelligence assessments and recommendations, supporting counterintelligence integration, reviewing software supplier Software Bills of Materials (SBOMs), and providing cyber-focused risk mitigation recommendations for supply chain risk assessments. The analyst will use SCRM analysis and team-support tools and maintain an understanding of supplier quality management, cybersecurity, and applicable NIST standards and controls. This position requires an active TS/SCI clearance and work in an office environment. The position is hybrid, full-time, salaried, and exempt. The anticipated salary range is $107,321 to $150,000.

Requirements

At least 9 years of relevant experience with a bachelor's degree in a related field; 7 years with a master's degree; 4 years with a Ph.D. or Juris Doctorate; or 13 years with a high school diploma or equivalent.
Knowledge of various SCRM data sets and tools.
Ability to perform extensive multi-INT analysis and produce technical intelligence reports in support of SCRM programs.
Ability to write clearly and concisely for senior-leader audiences.
Ability to recognize nuances, resolve contradictions and inconsistencies, and provide accurate and reliable analysis.
Proven ability to define comprehensive and innovative research approaches that support high-level tasks and rigorous assessments.
Understanding of the Risk Management Framework (RMF) and relevant CMS policies and standards, such as NIST 800-161, NIST 800-30, and NIST 800-37, or equivalents.
Active TS/SCI security clearance.

Nice To Haves

Experience with database management.
Experience with API and pipeline integration.
Experience with predictive risk modeling.
Experience with automated threat detection.
Experience with OMB, FASCSA, CISA policy, or FISMA.

Responsibilities

Initiate, integrate, manage, assess, and provide focused analysis in support of CMS SCRM efforts.
Use SCRM analysis and team-support tools, including SharePoint, JIRA, and AI applications.
Produce comprehensive analytic assessments, identify operational opportunities, and recommend integration of counterintelligence activities in alignment with CMS mission and objectives.
Engage in external collaborations to enhance intelligence production and gather insights.
Coordinate and share information with CMS leadership, program personnel, and other government agencies.
Provide subject matter expertise to prioritize topics of interest and conduct research for reports, databases, and other government-customer needs.
Maintain a strong understanding of supplier quality management processes, C-SCRM, cybersecurity, and cybersecurity plans and management.
Develop the supplier cyber evaluation portion of supply chain risk assessment reports.
Request, process, and review software supplier SBOMs for supply chain risks and provide cyber-focused risk mitigation recommendations within Supply Chain Risk Assessments.
Perform extensive multi-INT analysis and produce technical intelligence reports and assessments in support of SCRM programs.
Review analytic products for sound arguments, adherence to tradecraft standards, and adequate support for conclusions.

Benefits

Medical, dental, and vision plan choices.
Wellness resources.
Employee assistance programs.
Savings Plan options (401(k)).
Financial planning tools.
Life insurance.
Employee discounts.
Paid holidays and paid time off.
Tuition reimbursement.
Early childhood and post-secondary education scholarships.
Potential bonus or other non-recurrent compensation for qualified positions, if applicable.