Seeking a Senior Cybersecurity Supply Chain Risk Management Analyst
Role: Senior Cybersecurity Supply Chain Risk Management Analyst.
Location: On-site, Washington, DC.
Clearance: Top Secret
Agency: FBI
Job Description:
The Supply Chain Risk Manager supports OCIO's focus on the information, communications, and operational technology (ICT/OT) users who rely on a complex, globally distributed, and interconnected supply chain ecosystem to provide highly refined, cost-effective, and reusable solutions.
The position requires adept utilization of multiple FBI systems used to gather and analyze moderate to complex procurement documentation and justifications for high-risk ICT/OT products and services.
The position requires tiered supply chain risk management determinations that result in procurement or redirection of assets.
Responsibilities:
1. Provides analytical support to manage the increasing risk of supply chain compromise related to cybersecurity, whether intentional or unintentional.
2. Identifies, assesses, and mitigates the risks associated with the distributed and interconnected nature of ICT/OT product and service supply chains.
3. Ensures the integrity, security, quality, and resilience of the supply chain and its products and services.
4. Creates detailed technical vulnerability reports for ICT products and assigned technical "as a service" procurements.
5. Recognizes and identifies potential areas where existing security policies and procedures require change, or where new ones need to be developed, especially regarding future business expansion.
Provides information security matter expertise to technology teams and projects:
1. Creates security architecture standards for the adoption of new technology.
2. Identifies, quantifies, and recommends mitigation actions for security risks as they relate to enterprise projects.
3. Produces management reporting, including appropriate metrics that inform senior leadership as to the state of information risk and exposure.
4. Understands security product/service cost drivers and industry and business trends impacting the Agency's information security program.
Requirements: