Supply Chain Risk Management Analyst (SCRM)

Duration: Contract through approximately February 2027

Location: 100% Onsite – Fort Meade, Maryland

Schedule: Monday‑Friday, 9:00 AM‑5:00 PM (flexible start as early as 7:00 AM)

Key Responsibilities

• Support and mature an end‑to‑end IT/ICT Supply Chain Risk Management (SCRM) program.
• Develop and update SCRM policies, procedures, and risk management processes.
• Conduct supply chain risk assessments and evaluate potential foreign influence and threats.
• Support assessments of networks, hardware, software, and mission‑critical technology.
• Develop RFIs, risk assessment reports, briefings, meeting minutes, and other program documentation.
• Support implementation of SCRM strategies, training, processes, and performance metrics.
• Work with senior stakeholders to gather requirements and develop security and risk management documentation.

Required Qualifications

• Must be able to obtain the required U.S. Top Secret security clearance.
• 8+ years of relevant experience; Bachelor’s degree preferred or equivalent experience.
• Strong knowledge of DoD SCRM standards, including DoDI 5200.44 and NIST 800‑161.
• Experience in cybersecurity, supply chain risk management, and/or risk assessment.
• Strong communication and stakeholder‑management skills.
• Experience with project management and security/risk documentation.

Preferred Qualifications

• Master’s degree in Supply Chain Management, Engineering, Cybersecurity, or a related technical field.
• PMP or relevant project management experience.
• CISSP, CASP, or other cybersecurity certifications.
• Experience with systems engineering disciplines such as requirements, risk, schedule, and readiness.