Supply Chain Risk Management, Sr.

The Charles Stark Draper Laboratory•Clearfield, MA

23h•$95,000 - $245,000

About The Position

Draper is an independent, nonprofit research and development company headquartered in Cambridge, Massachusetts, with more than 2,000 employees. Its multidisciplinary teams develop solutions to national challenges across areas including defense, space exploration, and biomedical engineering. The Senior Supply Chain Risk Management Analyst assesses and analyzes defense industrial base suppliers in support of defense programs, helping secure complex, globally distributed ICT, hardware, and operational technology supply chains. The role focuses on assessing companies in the defense industrial base and managing implementation of the Supply Chain Risk Management NIST 800-53 Rev. 5 control family. The analyst identifies, assesses, and recommends mitigations for risks associated with products, services, suppliers, and procurement activities across defense programs and the enterprise. The position uses existing supply chain risk technologies and organizational protocols to deliver timely analyses and processes that comply with program SCRM policy requirements. The role requires a bachelor’s degree or an equivalent combination of formal education, at least eight years of general experience, and six years of experience in the functional responsibility area. A master’s degree may substitute for four years of general work experience. Experience implementing supply chain risk management activities in the DoD or other federal organizations is also required. Selected applicants must obtain and maintain a government security clearance; a Secret clearance is required. U.S. citizenship is required, and dual citizenship is not permitted. The position is based in Cambridge, Massachusetts. The full-time U.S. base salary range is $95,000 to $245,000. Draper describes workplace flexibility, employee clubs, health and finance workshops, off-site social events, and discounts to local museums and cultural activities as part of its work-life balance programs.

Requirements

Bachelor’s degree or an equivalent combination of formal education.
At least eight years of general experience and six years of experience in the functional responsibility area.
Experience implementing supply chain risk management activities in the DoD or other federal organizations.
A master’s degree may substitute for four years of general work experience.
Deep familiarity with cybersecurity supply chain risks and the defense industrial base.
Strong working knowledge of NIST 800-161 Rev. 1, ISO 28000, the ICD-73 series, and the SCRM NIST 800-53 control family, including experience drafting compliance and process documentation.
Expert understanding of DFARS, FAR, TAA, and supply-chain-related compliance topics, including NDAA 889, 1260H, nearshore/offshore guidance, country-of-origin risks, and critical supply chain considerations.
Ability to work independently as an action-oriented self-starter, prioritizing and managing multiple workstreams in a fast-paced environment.
Demonstrated success in cross-functional teams, adapting to changing priorities, and providing leadership in complex matrixed environments.
Familiarity with ISO 9001:2015 and AS9100 quality standards and ability to integrate quality principles into supply chain risk processes.
Advanced process-integration skills, including building workflows, identifying gaps, and developing efficiency and risk-reduction improvements.
Excellent interpersonal and communication skills, including the ability to explain technical information to technical and non-technical audiences.
Excellent time management and demonstrated ability to meet deadlines.
Strong analytical and problem-solving skills.
Outstanding written and oral communication skills, including developing formal assessments, reports, and presentations.
Ability to obtain and maintain a government security clearance; Secret clearance required.
U.S. citizenship required; dual citizenship is not permitted.

Responsibilities

Lead vulnerability identification through advanced analysis of systems, programs, and architectures to identify critical components, high-risk areas, and potential impacts across defense program supply chains.
Conduct independent assessments and validations of supplier security practices for compliance with federal defense and organizational requirements; document findings and provide expert recommendations to leadership and customers.
Compile, synthesize, and present complex risk assessments to internal stakeholders, executive leadership, and external customers.
Monitor and document major changes affecting supply chain risk, quality, resilience, and compliance, escalating and mitigating risks proactively.
Evaluate enterprise and supplier-level risks within Draper’s SCRM programs, identify systemic issues, and recommend improvements to program maturity.
Improve the SCRM framework using stakeholder feedback, industry best practices, and emerging regulatory requirements, and lead implementation of approved updates.
Perform quality checks of supplier reviews, ensure data accuracy, completeness, and analytical integrity, investigate discrepancies, and provide corrective-action guidance.
Collaborate with engineering, product development, operations, and security teams to align SCRM processes, standards, and operations with enterprise policies and strategic goals.
Analyze multi-source data for trends in supplier quality, product defects, and recurring vulnerabilities, and develop mitigation strategies.
Perform additional responsibilities in support of evolving organizational needs.