Aerospace Third-Party Risk & Supply Chain Analyst

Menlo Ventures; California (MO); On-site; USD 105,000 - 175,000; Full time

Benefits offered by this job

Equity

Health benefits

PTO

Job summary

True Anomaly seeks a driven Third-Party & Supply Chain Risk Analyst to own TPVRM and C-SCRM programs. You will assess suppliers, trace risk across hardware and software supply chains, track remediation, and build data foundations for executive decisions on vendors.

Ideal candidates have experience with NIST RMF, NIST 800-161, FAIR/OCTAVE, and thrive in aerospace/defense environments with cross-functional collaboration across procurement, engineering, security, legal, and compliance teams.

Qualifications

• Experience in third-party/vendor risk management, supply chain risk, or enterprise risk management.
• Hands-on vendor risk assessments, questionnaires, tiering, scoring and remediation tracking.
• Familiarity with NIST SP 800-161, SP 800-53, SP 800-171, DoD RMF, and CMMC.
• Knowledge of HBOM/SBOM, provenance, and risk concepts like concentration risk.

Responsibilities

• Own and execute the vendor risk assessment lifecycle end to end, including security questionnaires and risk scoring.
• Maintain vendor risk inventory with tiering, data exposure, and periodic reassessments.
• Monitor risk signals such as advisories, breaches, regulatory actions, and contractual status.
• Assess vendor cybersecurity posture against DFARS, NIST 800-171, and CMMC obligations.
• Translate assessment findings into risk mitigations and remediation commitments.
• Track remediation items to closure and document residual risk acceptances.

Skills

Risk management

Vendor risk

NIST RMF

C-SCRM

FAIR/OCTAVE

Cross-functional collaboration

Tools

Jira

Confluence

MS Project

MS Visio

Job description

True Anomaly seeks a driven Third-Party & Supply Chain Risk Analyst to own TPVRM and C-SCRM programs. You will assess suppliers, trace risk across hardware and software supply chains, track remediation, and build data foundations for executive decisions on vendors.

Ideal candidates have experience with NIST RMF, NIST 800-161, FAIR/OCTAVE, and thrive in aerospace/defense environments with cross-functional collaboration across procurement, engineering, security, legal, and compliance teams.