C-SCRM Analyst: Navy Cyber Supply Chain Risk (Hybrid)

Fortressinfosec; Washington (District of Columbia); Hybrid; USD 89,000 - 100,000; Full time

Benefits offered by this job

Remote and Hybrid work environment

401(k) match

Medical, dental, vision plans

Job summary

Fortress Information Security is seeking a Cyber Supply Chain Risk Management (C-SCRM) Analyst for its Government Delivery team in the District of Columbia area. The role is hybrid, with on-site work at Pax River about two days per week and flexibility as needed.

Responsibilities include analyzing cyber supply chain risks, reviewing BOMs, and translating data into risk narratives for stakeholders. Travel up to 15% and an active Secret clearance are required.

Qualifications

• 2–4 years in cyber supply chain risk management or related field.
• Active Secret clearance required at time of hire.
• Experience translating risk data into business or mission impact.

Responsibilities

• Analyze cyber supply chain risk data to identify supplier, product, software, hardware, ownership, control, influence, dependency, and vulnerability risks.
• Review data, BOMs, and indicators for completeness and risk.
• Translate findings into clear risk narratives and recommended actions.
• Support program-level reporting, briefings, and deliverables with PMs and SMEs.

Skills

Cybersecurity analysis

Risk analysis

Data interpretation

Active Secret Clearance

Education

Bachelor’s Degree or equivalent

Tools

Excel

PowerPoint

Job description

Fortress Information Security is seeking a Cyber Supply Chain Risk Management (C-SCRM) Analyst for its Government Delivery team in the District of Columbia area. The role is hybrid, with on-site work at Pax River about two days per week and flexibility as needed.

Responsibilities include analyzing cyber supply chain risks, reviewing BOMs, and translating data into risk narratives for stakeholders. Travel up to 15% and an active Secret clearance are required.