Senior SCRM Analyst

Federal Staffing Solutions Inc. • Washington, DC

6d • Hybrid

About The Position

Federal Staffing Solutions is seeking a Senior SCRM Analyst to work in Washington, DC, supporting their client. This role involves managing cybersecurity risks across the Agency’s complex, Interconnected Information, Communications, and Operational Technology (ICT/OT) supply chain to ensure products and services remain secure, reliable, and resilient throughout their lifecycle. The analyst will review procurement documentation, evaluate supplier risk, and identify CISA Known Exploited Vulnerabilities (KEV) to prioritize remediation of actively exploited supply chain vulnerabilities.

Requirements

• U.S. Citizenship is required
• Must have or be able to receive a Public Trust
• Candidate must live in the Washington, D.C., metropolitan area.
• Bachelor’s degree in computer science from an accredited institution, Cybersecurity, or related field (Master's degree preferred).
• 8+ years of experience in cybersecurity, risk management, or supply chain analysis. Equivalent combinations of experience, certifications, or demonstrated prior work may substitute for formal experience.

Nice To Haves

• Certifications: CISSP, CISSM, AWS Certified Security, Azure Security Engineer Associate, Security+, Network+ or equivalent IT certifications (preferred)

Responsibilities

• Establish the context for risk-based decisions identify, assess, and mitigate cybersecurity risks of supply chain compromise-both intentional and unintentional.
• Review and interpret criticality, threat, vulnerability, likelihood, impact associated with the distributed and interconnected nature of information, communications, and operational technology ICT/OT product and service supply chains.
• Ensure the integrity, security, quality, and resilience of the supply chain and its products and services.
• Develop detailed technical vulnerability reports for ICT products and "as-a-service" procurements.
• Identify areas where existing security policies and procedures require updates or where new ones should be developed.
• Provide subject matter expertise on Configuration Control Boards (CCB) and Engineering Review Boards to contribute to the creation of security architecture standards for the adoption of new technologies.
• Identify, quantify, and recommend mitigation actions for security risks impacting enterprise projects.
• Produce management reporting, monitor risk exposure and the effectiveness of mitigating risk on an ongoing basis, including tracking changes to an information system or supply chain using effective enterprise communications and a feedback loop to stakeholders and vendors for continuous improvement.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior