Senior SCRM Lead | Vendor & Software Security

ZTI Solutions LLC; Falls Church (VA); On-site; USD 130,000 - 180,000; Full time

Benefits offered by this job

4 Weeks Paid Time Off

Full health/vision/dental benefits for

401K with 4% matching

Job summary

ZTI Solutions LLC in Falls Church, VA seeks a Supply Chain Risk Management (SCRM) Lead to develop and implement risk programs for third-party vendors, software, and dependencies. You will coordinate vendor security assessments and define SCRM policies, interfacing with contracting and acquisition teams on security requirements.

The role requires 10+ years in cybersecurity with 3+ years in SCRM or third-party risk, a CISSP, and on-site work at the Falls Church location within DoD Advana

Qualifications

• Clearance: Secret (NIPR), Top Secret (SIPR), or TS/SCI Eligible (JWICS) based on network assignment.
• Education: Bachelor's Degree in Information Technology, Cybersecurity, Computer Science, or related field.
• Experience: 10+ years cybersecurity; 3+ years supply chain risk management or third-party risk.
• Certifications: CISSP required; CISM, CRISC, or procurement certifications desired.
• Technical Knowledge: Understanding of supply chain security threats, vendor risk assessment methodologies, Software Composition Analysis, NIST 800-161.

Responsibilities

• Develop comprehensive supply chain risk management program.
• Manage 30-80 third-party vendor relationships requiring security assessment.
• Conduct 20-40 vendor security assessments annually.
• Review 50-150 commercial software products for supply chain risk.
• Analyze software composition and third-party dependencies.
• Interface with contracting and acquisition teams on security requirements.
• Develop 5-15 SCRM policies and procedures.
• Monitor vendor security posture for changes and incidents.

Skills

Cybersecurity

Vendor risk management

Third-party risk assessment

Education

Bachelors Degree in Information Technology / Cybersecurity / Computer Science

Tools

NIST 800-161

Software Composition Analysis

Job description

ZTI Solutions LLC in Falls Church, VA seeks a Supply Chain Risk Management (SCRM) Lead to develop and implement risk programs for third-party vendors, software, and dependencies. You will coordinate vendor security assessments and define SCRM policies, interfacing with contracting and acquisition teams on security requirements.

The role requires 10+ years in cybersecurity with 3+ years in SCRM or third-party risk, a CISSP, and on-site work at the Falls Church location within DoD Advana