Remote: Lead Supply Chain Risk Management Analyst

Leidos Inc; Reston (VA); Sur place; USD 92 000 - 167 000; Plein temps

Résumé du poste

Leidos is seeking a Supply Chain Risk Management Analyst to support the FAA's SCRM program. Embedded in a small team, you will assess vendor risk for software, cloud, AI, telecommunications, and OT/ICS, and translate findings into risk scores and executive briefings.

The ideal candidate has 8+ years in intelligence analysis or third‑party risk management, strong knowledge of NIST CSCRM frameworks, and experience drafting contract security language for procurement. U.S.

Qualifications

• Bachelor's degree in a related discipline or equivalent experience.
• 8+ years as Intelligence Analyst or third-party risk management/C-SCRM experience.
• Strong knowledge of federal cybersecurity risk management frameworks (NIST SP 800-161, SP 800-53).
• Experience drafting contract security language for procurement.

Responsabilités

• Conduct enterprise-level vendor risk assessments for software, cloud, AI, telecom, and OT/ICS.
• Develop risk scores and Vendor Risk Reports mapping vulnerabilities.
• Provide SCRM expertise across the procurement lifecycle and source selections.
• Draft Acquisition Security Reviews and evaluation matrices for AMS pipeline.
• Translate technical risk data into clear executive summaries for FAA leadership.
• Contribute to FAA SCRM policies, governance, and SOPs.
• Create program metrics and executive leadership reports.
• Coordinate SCRM training and awareness for acquisition personnel.

Connaissances

Vendor risk assessment

SCRM frameworks

Technical risk scoring

Contract security language

Executive summaries

Formation

Bachelor's degree or equivalent

Description du poste

Leidos is seeking a Supply Chain Risk Management Analyst to support the FAA's SCRM program. Embedded in a small team, you will assess vendor risk for software, cloud, AI, telecommunications, and OT/ICS, and translate findings into risk scores and executive briefings.

The ideal candidate has 8+ years in intelligence analysis or third‑party risk management, strong knowledge of NIST CSCRM frameworks, and experience drafting contract security language for procurement. U.S.