SCRM & AI Security Analyst

K2Share LLC; Washington (District of Columbia); On-site; USD 120,000 - 170,000; Full time

Job summary

K2United, LLC in the United States seeks a skilled cybersecurity risk analyst to support SCRM programs and AI-enabled technology reviews. You will analyze third-party risks, maintain documentation, and provide risk analyses and secure-implementation recommendations.

The role emphasizes coordinating with stakeholders, identifying gaps, and ensuring compliance with OMB and NIST guidelines, including AI risk management frameworks, across software, systems, and services.

Qualifications

• Bachelor's degree in cybersecurity, information technology, risk management, or related field; equivalent experience considered.
• Four+ years in cybersecurity risk, third-party or vendor risk, or security compliance analysis.
• Experience performing third-party or supply chain security risk assessments and producing written risk analyses and mitigation recommendations.
• Working knowledge of federal software supply chain policy (OMB M-21-30, M-22-18, M-23-16) and NIST SP 800-218.
• Familiarity with the NIST AI Risk Management Framework and AI governance considerations.

Responsibilities

• Support operation and enhancement of the client's SCRM activities and maintain records.
• Analyze third-party and technology-related security risks and provide mitigation recommendations.
• Identify gaps in current SCRM practices and suggest improvements to process, governance, and reporting.
• Assess security posture of third-party technologies and evolving cyber risks.
• Support AI security compliance, vulnerability, and risk activities for AI-enabled software and services.
• Perform security review support and develop secure implementation recommendations.
• Coordinate with stakeholders on security implications of emerging technical capabilities.
• Support secure adoption assessments for modernization, automation, and analytics.

Skills

Written analysis

Risk assessment

Stakeholder coordination

Regulatory compliance

Education

Bachelor's degree in cybersecurity or related field

Equivalent experience considered

Job description

K2United, LLC in the United States seeks a skilled cybersecurity risk analyst to support SCRM programs and AI-enabled technology reviews. You will analyze third-party risks, maintain documentation, and provide risk analyses and secure-implementation recommendations.

The role emphasizes coordinating with stakeholders, identifying gaps, and ensuring compliance with OMB and NIST guidelines, including AI risk management frameworks, across software, systems, and services.