Cybersecurity Supply Chain Risk Analyst

About the role

9th Way Insignia is a service-disabled, veteran-owned small business delivering technology solutions to government customers. The organization specializes in cybersecurity, cloud modernization, software development, data analytics, enterprise architecture, enterprise IT, analytics, process automation, and artificial intelligence, supporting mission-critical government operations. The CYBERSECURITY SUPPLY CHAIN RISK ANALYST role supports the Department of Veterans Affairs Cybersecurity Operations and Services Enterprise program. This position focuses on assessing and managing cybersecurity risks related to vendors, products, and third-party services to protect VA systems and data. The role contributes directly to strengthening the cyber resilience of digital services utilized by Veterans, their families, and the VA workforce.

Responsibilities

• Assess cybersecurity supply-chain risks involving vendors, products, services, software, and third-party dependencies.
• Document supply-chain security requirements, risk findings, mitigations, and acceptance decisions.
• Review supplier security evidence, provenance information, vulnerability notices, and remediation plans.
• Coordinate with acquisition, engineering, security, legal, and program stakeholders on third-party risk decisions.
• Support continuous monitoring of supplier risks, emerging threats, and corrective-action status.

Requirements

• Bachelor's degree in cybersecurity, information systems, supply-chain management, business, engineering, or related field, or equivalent experience.
• Five or more years of experience in cybersecurity, third-party risk, supply-chain risk, governance, risk, and compliance, security assessment, or related areas.
• Experience conducting vendor or product security assessments with documentation of risks, controls, and remediation.
• Knowledge of cybersecurity supply-chain risk management practices, including NIST guidance and third-party security controls.
• Strong skills in risk analysis, documentation, stakeholder engagement, and judgment.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• 401(k) retirement plan

Pay

Salary range $98,135 to $125,000 USD, subject to factors such as job responsibilities, education, experience, skills, and internal equity.