Remote Risk & Compliance Analyst - Cyber Supply Chain

Triumph Enterprises, Inc; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Triumph Enterprises, Inc. is seeking a Risk and Compliance Analyst to own risk, compliance, and the supply chain reporting spine for a VA cybersecurity program. The role covers weekly risk analysis, SBOM validation, and quarterly FISMA/CISA reporting from a remote setting in the Washington, DC area.

Required are 7+ years in information security with 5+ in risk/compliance, along with a relevant degree; federal program experience highly valued. Tier 4 background investigation and U.S.

Qualifications

• Expertise in risk management, compliance, audit, or related roles.
• Experience conducting internal and external audits for regulatory compliance.
• Experience developing and implementing risk management programs and continuous monitoring.

Responsibilities

• Produce the Security Risk Analysis Report weekly (52 per option year).
• Build and operate the Cyber Supply Chain Risk Management program including vendor risk framework and scoring.
• Own SBOM validation procedures and quarterly SBOM reporting.
• Maintain critical supplier inventory and risk prioritization; implement banned vendor automation.
• Report FISMA and CISA compliance quarterly and track data quality metrics (asset coverage, data accuracy, tagging).
• Produce security posture reports and remediation updates after audits; maintain requirements traceability matrices.
• Support cyber engineering modernization with risk analysis and continuous monitoring.

Skills

Risk management

Compliance

Audit

Regulatory reporting

Policy development

Data quality reporting

Education

Bachelor's degree in Cybersecurity, CS, IS, or related

Job description

Triumph Enterprises, Inc. is seeking a Risk and Compliance Analyst to own risk, compliance, and the supply chain reporting spine for a VA cybersecurity program. The role covers weekly risk analysis, SBOM validation, and quarterly FISMA/CISA reporting from a remote setting in the Washington, DC area.

Required are 7+ years in information security with 5+ in risk/compliance, along with a relevant degree; federal program experience highly valued. Tier 4 background investigation and U.S.