Remote SCRM Analyst — Enterprise Vendor Risk & Security

Leidos Inc; Reston (VA); On-site; USD 92,000 - 167,000; Full time

Job summary

Leidos is seeking a Supply Chain Risk Management Analyst to support FAA's CI SCRM program. Embedded in a small team, you will assess vendor security, score risks, and draft contract language to mitigate threats across software, cloud, AI tools, and OT/ICS environments.

You will translate technical findings into executive-level summaries for FAA leadership and help shape SCRM policies and procedures, engaging with stakeholders including CIO, CISA, FBI, DHS, and the IC as needed.

Qualifications

• Bachelor's degree in a related field or equivalent experience.
• 8+ years as an intelligence analyst or in third-party/cyber risk management.
• Strong working knowledge of NIST CSRM frameworks.

Responsibilities

• Conduct enterprise-level vendor risk assessments and security reviews.
• Develop risk scores and vendor risk reports.
• Draft contract security language for FAA procurements.
• Translate technical findings into executive summaries.
• Support acquisition planning and source selections.
• Contribute to FAA SCRM policies and SOPs.

Skills

Vendor risk assessments

Technical security reviews

SCRM expertise

Acquisition planning

Contract security language

Executive summaries

Education

Bachelor's degree in a related discipline

Tools

NIST SP 800-161

NIST SP 800-53

FAA AMS

Vendor risk management tools

Job description

Leidos is seeking a Supply Chain Risk Management Analyst to support FAA's CI SCRM program. Embedded in a small team, you will assess vendor security, score risks, and draft contract language to mitigate threats across software, cloud, AI tools, and OT/ICS environments.

You will translate technical findings into executive-level summaries for FAA leadership and help shape SCRM policies and procedures, engaging with stakeholders including CIO, CISA, FBI, DHS, and the IC as needed.