Senior Defense SCRM Analyst

Draper Labs; Saint Petersburg (FL); On-site; USD 95,000 - 245,000; Full time

Job summary

Draper in Cambridge, MA is seeking a Senior Supply Chain Risk Management Analyst to assess and mitigate risks in defense-related supplier networks. You will lead analyses of supplier security practices, align with NIST 800-53 Rev 5 and other standards, and drive corrective actions across complex, globally distributed supply chains.

The role requires deep experience in defense SCRM, program governance, and collaboration with engineering, product development, operations, and security teams.

Qualifications

• Bachelor's degree in a relevant field with 8+ years of experience in supply chain risk management.
• Experience implementing DoD or federal supply chain risk management activities.
• Active government security clearance or ability to obtain one.

Responsibilities

• Lead vulnerability identification across defense program supply chains.
• Assess supplier security practices for compliance with federal requirements.
• Present complex risk assessments to leadership and customers.
• Monitor changes affecting supply chain risk and escalate mitigations.
• Evaluate enterprise and supplier risks to improve program maturity.
• Enhance the SCRM framework with stakeholder feedback and regulatory updates.
• Quality-check supplier reviews for data accuracy and analytical integrity.
• Collaborate with engineering, operations, and security to align processes with policies.
• Analyze multi-source data to identify trends and develop mitigation strategies.
• Be ready to support evolving organizational needs.

Skills

Cybersecurity supply chain

NIST 800-53 Rev 5

DFARS/FAR compliance

ISO 9001/AS9100

Cross-functional leadership

Risk analysis

Education

Bachelor's degree in relevant field

Job description

Draper in Cambridge, MA is seeking a Senior Supply Chain Risk Management Analyst to assess and mitigate risks in defense-related supplier networks. You will lead analyses of supplier security practices, align with NIST 800-53 Rev 5 and other standards, and drive corrective actions across complex, globally distributed supply chains.

The role requires deep experience in defense SCRM, program governance, and collaboration with engineering, product development, operations, and security teams.