Remote Senior Risk & C-SCRM Lead

Socket.dev; Springfield (VA); On-site; USD 115,000 - 125,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Paid time off

Remote work options

Job summary

Connected Logistics is seeking a Senior Risk & Compliance Analyst (C-SCRM Lead) to support the VA's COSE program. This remote role leads risk management, conducts IT security risk assessments, and coordinates C-SCRM activities across supply chains.

Strong collaboration with engineering, acquisition, and leadership is required to communicate risk, drive mitigation, and ensure RMF compliance. The role emphasizes threat analyses, risk registers, POA&M tracking, and continuous monitoring within a

Qualifications

• Public Trust: T4 or T5 (TS)
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Information Systems, Risk Management or related field or an Associate's with 2+ years experience
• Minimum of five (5) years of relevant cybersecurity, information security, IT risk management, security compliance, security assessment, C-SCRM, or related field
• Experience conducting IT security risk assessments, threat analyses, and security control assessments
• Knowledge of cybersecurity risk management concepts, assessment methodologies, security controls, vulnerability management, compliance, and continuous monitoring
• Ability to translate technical risk into understandable risk statements for technical and non-technical stakeholders
• Preferred: leadership in C-SCRM programs in federal environment; RMF familiarity; certifications such as CISSP, CISM, CRISC, CAP/CGRC

Responsibilities

• Lead cybersecurity risk management and C-SCRM activities across systems, applications, infrastructure, cloud environments, products, services, and supply chains.
• Conduct IT security risk assessments and threat analyses to identify vulnerabilities and impacts.
• Coordinate C-SCRM assessments of technology products, software, hardware, services, and third-party dependencies.
• Identify and evaluate supply chain cybersecurity risks related to product provenance and third-party suppliers.
• Oversee security control assessments and remediation actions.
• Develop risk registers and remediation plans with owners and milestones.
• Provide risk-based recommendations to leadership and stakeholders.
• Support RMF processes including assessment, authorization, and continuous monitoring.
• Monitor changes in systems, suppliers, and operational environments for risk evolution.
• Communicate technical risks and business impacts clearly to technical and non-technical audiences.

Skills

Risk management

C-SCRM

IT risk assessments

Education

Bachelor's degree

Associate's degree + 2 years experience

Job description

Connected Logistics is seeking a Senior Risk & Compliance Analyst (C-SCRM Lead) to support the VA's COSE program. This remote role leads risk management, conducts IT security risk assessments, and coordinates C-SCRM activities across supply chains.

Strong collaboration with engineering, acquisition, and leadership is required to communicate risk, drive mitigation, and ensure RMF compliance. The role emphasizes threat analyses, risk registers, POA&M tracking, and continuous monitoring within a