Cybersecurity Supply Chain Risk Management SME

Akira Technologies Inc.; Washington (District of Columbia); On-site; USD 150,000 - 175,000; Full time

Job summary

Akira Technologies, Inc. in Washington, DC seeks a Cybersecurity Supply Chain Risk Management (C-SCRM) Subject Matter Expert to support federal cybersecurity and risk management initiatives.

You will provide expert analysis, guidance, and innovative solutions on complex IT and supply chain risks. The role requires working with government stakeholders to develop risk-based mitigations and communicate findings clearly.

Qualifications

• 3+ years of risk management experience including C-SCRM.
• Active TS clearance with SCI eligibility.
• CISSP, CISM or CRISC certification or equivalent.

Responsibilities

• Provide expert analysis for complex cybersecurity, IT and risk problems.
• Establish and mature C-SCRM risk management programs.
• Assess cybersecurity and supply chain risks and design mitigations.
• Develop and improve C-SCRM processes, policies and procedures.
• Research emerging threats, vulnerabilities and supply chain risks.
• Communicate findings clearly to project teams and stakeholders.

Skills

C-SCRM

Risk management

Cybersecurity

Cryptography

Communication

Independent work

Education

CISSP/CISM/CRISC certification

Tools

NIST guidance

C-SCRM frameworks

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Cybersecurity Supply Chain Risk Management SME

Full Time Washington, DC, US

Salary Range: $150,000.00 To $175,000.00 Annually

Akira Technologies, Inc. is seeking a Cybersecurity Supply Chain Risk Management (C-SCRM) Subject Matter Expert (SME) to support complex cybersecurity and risk management initiatives for a federal customer. The SME will provide expert analysis, research, and technical guidance on exceptionally complex problems and processes involving information technology, cybersecurity, and supply chain risk management.

The ideal candidate will serve as a technical expert on project teams, develop innovative solutions, and communicate effectively with technical and non-technical stakeholders while working with minimal direction.

Key Responsibilities

• Provide expert support, analysis, and research for complex cybersecurity, IT, and risk management problems.
• Establish, implement, and mature risk management programs, including Cybersecurity Supply Chain Risk Management (C-SCRM).
• Apply advanced technical expertise to assess cybersecurity and supply chain risks and develop innovative mitigation strategies.
• Support the development, implementation, and improvement of C-SCRM processes, policies, and procedures.
• Conduct research and analysis of emerging cybersecurity threats, vulnerabilities, and supply chain risks.
• Provide technical guidance and recommendations to project teams and government stakeholders.
• Contribute to risk assessments, security analysis, and the development of risk-based solutions.
• Demonstrate expertise across the designated C-SCRM task areas and communicate findings through clear, concise written and oral presentations.
• Work independently with minimal direction while collaborating effectively with multidisciplinary teams.

Required Qualifications

• 3+ years of experience establishing or managing a risk management program, including C-SCRM.
• Demonstrated experience in each of the designated C-SCRM task areas.
• High-level cybersecurity or risk management certification, such as CISSP, CISM, or CRISC.
• Active Top Secret (TS) security clearance with SCI eligibility, in accordance with the applicable security requirements.
• 3+ years of experience with cryptographic algorithms.
• Strong understanding of cybersecurity principles, risk management frameworks, and supply chain security practices.
• Exceptional written and oral communication skills.
• Ability to work independently and provide expert-level technical guidance with minimal supervision.

Preferred Qualifications

• Experience with post-quantum cryptography (PQC) or emerging cryptographic standards and technologies.
• Experience supporting federal cybersecurity, information assurance, or supply chain risk management programs.
• Familiarity with NIST cybersecurity and risk management guidance, C-SCRM frameworks, and federal security requirements.
• Experience translating complex technical risks into actionable recommendations for government and executive stakeholders.

Salary Range: $150,000 to $175,000

Akira’s pay range for this position considers various factors including skills, years of experience, training, licenses, certifications, alignment with market data, and internal equity in the organization. This pay range estimate is a general guideline only and not a guarantee of compensation or salary, which Akira believes to be done in good faith in compliance with local laws. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. It is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case.

General Description of Benefits

Akira offers its employees multiple options for medical plans (some with Health Savings Account), dental plans, and vision coverage, and a 401(k) plan with employer match. To promote work/life balance, Akira offers paid time off, including vacation and sick time, holidays, paid parental leave, military leave, bereavement leave, and jury duty leave. We also offer short and long-term disability benefits to protect employee income in the event of sickness or injury, life insurance, accidental death and dismemberment insurance, and critical illness insurance. Akira also offers tuition, training, and certification reimbursement for professional development and career advancement.

Akira regularly reviews our total rewards package to ensure our offerings remain competitive and reflect the values and needs expressed by our employees.

Akira strives to meet and exceed the mission and objectives of US federal agencies. As a leading small business cloud modernization and data analytics services provider, we deliver trusted and highly differentiated solutions and technologies that serve the needs of our customers and citizens. Akira serves as a valued partner to essential government agencies across the intelligence, cyber, defense, civilian, and health markets. Every day, our employees deliver transformational outcomes, solving the most daunting challenges facing our customers.

Akira is proud to be an Equal Employment Opportunity and Affittve Action employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.