Remote C-SCRM & Post-Quantum Crypto SME

Navanti Group; Arlington (VA); On-site; USD 120,000 - 190,000; Full time

Job summary

Navanti Group seeks a senior Cybersecurity Supply Chain Risk Management (C-SCRM) and Post-Quantum Cryptography (PQC) Subject Matter Expert to support a federal customer in strengthening enterprise supply-chain risk management and preparing acquisition processes for emerging cryptographic requirements.

The SME will help government stakeholders improve C-SCRM strategy, vendor-risk assessments, risk-scoring methodologies, documentation, and PQC readiness, with responsibilities including developing

Qualifications

• Minimum 3 years of experience establishing or managing a risk-management program that includes C-SCRM.
• Demonstrated experience with cybersecurity supply-chain risk management, supplier/vendor risk, and third-party risk assessment.
• Minimum 3 years of experience working with cryptographic algorithms.
• Experience developing cybersecurity or risk-management strategies, frameworks, assessment methodologies, scoring models, SOPs, or implementation guidance.
• Experience supporting C-SCRM strategy, vendor-risk assessments, documentation, questionnaires, scoring, and implementation guidance.
• One or more senior cybersecurity/risk certifications such as CISSP, CISM, CRISC, or equivalent.
• Strong written and verbal communication skills and the ability to advise senior government stakeholders.

Responsibilities

• Develop and refine an enterprise C-SCRM strategy and implementation plan.
• Assess existing supplier and vendor risk-management processes and recommend improvements.
• Develop standardized C-SCRM risk frameworks, methodologies, guides, and operating procedures.
• Review and improve vendor-risk questionnaires, scoring criteria, and assessment methodologies.
• Conduct analysis of post-quantum cryptography readiness within a federal acquisition environment.
• Develop a PQC readiness roadmap aligned with NIST and applicable federal cybersecurity guidance.
• Advise government stakeholders on cryptographic algorithms, modernization requirements, and emerging PQC risks.
• Support development of repeatable processes for identifying, assessing, documenting, and mitigating cybersecurity supply-chain risks.
• Translate complex cybersecurity, supplier, and technology risks into practical acquisition and risk-management decisions.
• Support project management, quality management, status reporting, and transition activities.

Skills

C-SCRM program

Risk assessment

Cryptographic algorithms

Documentation guidance

SOP development

Stakeholder communication

Education

CISSP/CISM/CRISC

Job description

Navanti Group seeks a senior Cybersecurity Supply Chain Risk Management (C-SCRM) and Post-Quantum Cryptography (PQC) Subject Matter Expert to support a federal customer in strengthening enterprise supply-chain risk management and preparing acquisition processes for emerging cryptographic requirements.

The SME will help government stakeholders improve C-SCRM strategy, vendor-risk assessments, risk-scoring methodologies, documentation, and PQC readiness, with responsibilities including developing