Supply Chain Risk Management (SCRM) Lead

ZTI Solutions • Falls Church, VA

1d • Onsite

About The Position

SCRM Leads develop and implement supply chain risk management programs assessing and mitigating risks from third-party vendors, commercial software, and supply chain dependencies. This role coordinates vendor security assessments, establishes SCRM policies, and interfaces with contracting and acquisition teams on security requirements. This position supports comprehensive cybersecurity operations for the Advana platform across three classified networks (NIPR, SIPR, JWICS).

Requirements

• Clearance: Secret (NIPR), Top Secret (SIPR), or TS/SCI Eligible (JWICS) based on network assignment.
• Bachelor's Degree in Information Technology, Cybersecurity, Computer Science, or related field.
• 10+ years cybersecurity experience.
• 3+ years supply chain risk management or third-party risk experience.
• CISSP required.
• Understanding of supply chain security threats, vendor risk assessment methodologies, Software Composition Analysis, NIST 800-161.
• U.S. Citizen required.

Nice To Haves

• CISM, CRISC, or procurement certifications desired.

Responsibilities

• Develop comprehensive supply chain risk management program.
• Manage 30-80 third-party vendor relationships requiring security assessment.
• Conduct 20-40 vendor security assessments annually.
• Review 50-150 commercial software products for supply chain risk.
• Analyze software composition and third-party dependencies.
• Interface with contracting and acquisition teams on security requirements.
• Develop 5-15 SCRM policies and procedures.
• Monitor vendor security posture for changes and incidents.

Benefits

• 4 Weeks Paid Time Off.
• All Federal Holiday’s Paid Vacation.
• Four Percent Matching 401K.
• Full health/vision/dental benefits for the employee and family paid 100% by ZTI Solutions, LLC.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior