Principal Cyber Analyst: Supply Chain & Asset Security

Northrop Grumman; Roy (UT); On-site; USD 98,000 - 184,000; Full time

Job summary

Northrop Grumman is seeking a Principal/Senior Principal Cyber Analyst to support IT hardware lifecycle planning and strict hardware accountability at our Roy, Utah site. The role focuses on C-SCRM compliance with DoD guidance, NIST standards, and secure supply chain processes.

The candidate will work onsite full-time, ensuring an unbroken chain of custody, authenticated inventory, and auditable records while collaborating with security teams to address supply chain vulnerabilities.

Qualifications

• 3+ years in IT asset management (ITAM) within a DoD-regulated environment.
• Working knowledge of NIST SP 800-161 (C-SCRM) and NIST SP 800-53 (Configuration Management).
• Ability to obtain and maintain U.S. Government Secret clearance and SAP/SAR access.

Responsibilities

• Execute supplier tiering and risk profiling during procurement to ensure hardware originates from trusted OEMs.
• Inspect inbound IT shipments for tampering, counterfeit parts, or altered serial configurations.
• Maintain continuous operational evidence of C-SCRM controls for DoD audits.
• Log, serialize, and apply asset tags to establish an unbroken chain of custody.

Skills

IT Asset Management

NIST SP 800-161 (C-SCRM)

DoD SCRM regulations

Security+ CE certification

Education

Master's Degree

Bachelor's Degree

Tools

ServiceNow

Jira Service Management

CMDB platforms / ITAM tooling

Job description

Northrop Grumman is seeking a Principal/Senior Principal Cyber Analyst to support IT hardware lifecycle planning and strict hardware accountability at our Roy, Utah site. The role focuses on C-SCRM compliance with DoD guidance, NIST standards, and secure supply chain processes.

The candidate will work onsite full-time, ensuring an unbroken chain of custody, authenticated inventory, and auditable records while collaborating with security teams to address supply chain vulnerabilities.