Senior Supply Chain Cyber Risk Manager

General Atomics Aeronautical Systems; Poway (CA); On-site; USD 100,000 - 183,000; Full time

Benefits offered by this job

Travel less than 25%

Job summary

General Atomics Aeronautical Systems, Inc. (GA-ASI) seeks an experienced leader to assess and mitigate supplier cybersecurity and supply chain risks. The role coordinates with supply chain, program management, engineering, cybersecurity, and suppliers to address third party cyber risk, resilience, and regulatory compliance.

The position develops mitigation strategies, oversees risk posture, and supports production, quality, schedule, and customer requirements. Travel up to 25% may be required.

Qualifications

• Bachelor’s degree and 11+ years in supply chain, risk management, cybersecurity, or defense-related program support.
• Working knowledge of cybersecurity requirements within the defense industrial base (DFARS, NIST SP 800-171, and CMMC).
• CISSP, CompTIA Security+, CISA, or CMMC certification is highly desirable.
• Preference for candidates with third-party/vendor risk management and supply chain/subcontracts experience.
• Ability to identify and assess risk, analyze data, and develop mitigation strategies.

Responsibilities

• Administer and support the third party risk management program by collecting, reviewing, and assessing supplier cybersecurity information.
• Evaluate supplier cybersecurity posture against DFARS flow down requirements and track remediation.
• Interface with suppliers to communicate risk findings and coordinate remediation activities.
• Collaborate with cybersecurity, compliance, and legal teams to document and monitor supplier risk.
• Develop processes aligning supply chain risk management with NIST SP 800-161 and DoD cybersecurity requirements.
• Monitor defense cybersecurity regulations and update assessment criteria accordingly.
• Ensure proper handling of sensitive information including CUI per requirements.
• Conduct risk assessments and provide actionable mitigation recommendations.
• Prepare and deliver risk status updates to stakeholders.

Skills

Risk assessment

Cybersecurity compliance

Data analysis

Stakeholder communication

Independent work

Cross-functional leadership

Education

Bachelor's degree in business, supply chain, cybersecurity, engineering, or a related discipline

Tools

SAP

Optro

Bitsight

Resilinc

Microsoft Office

Job description

General Atomics Aeronautical Systems, Inc. (GA-ASI) seeks an experienced leader to assess and mitigate supplier cybersecurity and supply chain risks. The role coordinates with supply chain, program management, engineering, cybersecurity, and suppliers to address third party cyber risk, resilience, and regulatory compliance.

The position develops mitigation strategies, oversees risk posture, and supports production, quality, schedule, and customer requirements. Travel up to 25% may be required.