Remote Cybersecurity Supply-Chain Risk Analyst

9th Way Insignia; Northern (KY); Hybrid; USD 98,000 - 125,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Voluntary Life Insurance

401(k)

Basic Life A&D

STD

LTD

PTO

Telehealth

paid holidays

FSA

HSA

Employee Assistance Program (EAP)

Traveling Assistance

Job summary

9th Way Insignia is seeking a Cybersecurity Supply Chain Risk Analyst to support the VA COSE program, focusing on risk assessment of vendors, products, and third-party dependencies to strengthen cyber resilience.

The role requires a Bachelor's degree or equivalent experience and 5+ years in cybersecurity or related fields, with experience in vendor security assessments and knowledge of NIST guidance. This is a full-time, on-site position contingent on contract award, with comprehensive benefits.

Qualifications

• Bachelor's degree or equivalent experience.
• 5+ years in cybersecurity, third-party risk, supply-chain risk, GRC, or related fields.
• Experience conducting vendor or product security assessments and documenting risks and remediation actions.
• Knowledge of NIST guidance, software supply-chain risks, and third-party security controls.
• Strong risk-analysis, documentation, stakeholder-engagement, and judgment skills.

Responsibilities

• Assess cybersecurity supply-chain risks for vendors, products, services, software, and third-party dependencies.
• Document security requirements, risk findings, mitigations, and acceptance decisions.
• Review supplier security evidence, provenance information, vulnerabilities, and remediation plans.
• Coordinate with procurement, engineering, security, legal, and program stakeholders on risk decisions.
• Support continuous monitoring of supplier risks and corrective actions.

Skills

Cybersecurity

Third-party risk

GRC

Security assessment

Education

Bachelor's degree in cybersecurity / information systems / supply-chain management / business / engineering

Job description

9th Way Insignia is seeking a Cybersecurity Supply Chain Risk Analyst to support the VA COSE program, focusing on risk assessment of vendors, products, and third-party dependencies to strengthen cyber resilience.

The role requires a Bachelor's degree or equivalent experience and 5+ years in cybersecurity or related fields, with experience in vendor security assessments and knowledge of NIST guidance. This is a full-time, on-site position contingent on contract award, with comprehensive benefits.