Cybersecurity Supply Chain Risk Management SCRM Analyst

JCD Staffing; Washington (District of Columbia); On-site; USD 100,000 - 130,000; Full time

Job summary

JCD Staffing is seeking a Senior Cybersecurity Supply Chain Risk Management Analyst in Washington, DC, to support federal cybersecurity initiatives. This role focuses on identifying and mitigating risks related to complex supply chains, requiring an active TS clearance and extensive experience in cybersecurity.

The ideal candidate will have 8+ years of experience, a Bachelor’s degree in a relevant field, and strong communication skills. This is a direct hire opportunity with an onsite schedule, 5 days a week.

Qualifications

• 8+ years of experience in cybersecurity or closely related work.
• Strong understanding of cybersecurity risk management principles.
• Ability to communicate technical risk findings clearly.

Responsibilities

• Analyze and assess cybersecurity risks related to ICT/OT supply chains.
• Review procurement documentation for risk-based determinations.
• Develop technical vulnerability reports with mitigation strategies.

Skills

Cybersecurity risk management principles

Supply chain analysis

Communication of technical findings

Education

Bachelor’s degree in Computer Science or related field

Tools

Network+ certification

Security+ certification

Job description

Senior Cybersecurity Supply Chain Risk Management (SCRM) Analyst

Location: Washington, DC

Schedule: Onsite, 5 days/week

Position Type: Direct Hire

Clearance Required: Active TS clearance required at time of application. Must be willing and able to obtain SCI access and pass a CI polygraph.

Compensation: Max salary as listed in the job description

Citizenship: U.S. Citizenship required

We are seeking a Senior Cybersecurity Supply Chain Risk Management (SCRM) Analyst to support a high-visibility federal environment focused on securing complex, globally distributed ICT and operational technology supply chains. This individual will play a key role in identifying, assessing, and mitigating cybersecurity risks associated with products, services, suppliers, and procurement activities across the enterprise.

This is an excellent opportunity for a cybersecurity professional with strong experience in supply chain risk, enterprise security, and vulnerability analysis who can help ensure the integrity, resilience, and security of critical technology assets throughout their lifecycle.

Key Responsibilities

• Analyze and assess cybersecurity risks related to ICT/OT supply chains, including both intentional and unintentional compromise
• Review procurement documentation and supplier-related materials to support risk-based determinations and asset procurement decisions
• Evaluate supply chain threats tied to products, services, and “as-a-service” offerings
• Develop detailed technical vulnerability reports and recommend mitigation strategies
• Help ensure the integrity, quality, security, and resilience of technology supply chains and associated services
• Identify gaps in existing security policies and procedures and recommend updates or new controls as needed
• Provide information security guidance to technical teams and enterprise initiatives
• Support the development of security architecture standards for new and emerging technologies
• Identify, quantify, and communicate security risks affecting enterprise programs and projects
• Produce management reports, metrics, and analysis to inform leadership on supply chain and information security posture
• Stay current on industry trends, cost drivers, and business factors impacting cybersecurity and supply chain risk programs

Required Qualifications

• Bachelor’s degree in Computer Science, Business Management, Information Technology, or a related field
• 8+ years of experience in cybersecurity, risk management, supply chain analysis, or closely related work
• Additional relevant experience may be considered in lieu of a degree
• Active TS clearance required at time of application
• Must be willing and able to obtain SCI access and pass a CI polygraph
• Strong understanding of cybersecurity risk management principles in complex enterprise environments
• Experience evaluating supplier, procurement, and technology-related security risks
• Ability to communicate technical risk findings clearly to both technical and non-technical stakeholders

Preferred Qualifications

• Network+ and Security+ or equivalent IT/cybersecurity certifications
• Experience supporting federal environments
• Background in ICT/OT security, enterprise vulnerability analysis, and supply chain resilience initiatives