Strategic Cyber Risk & Supply Chain Lead

TalentCORE, Inc.; Poway (CA); On-site; USD 130,000 - 185,000; Full time

Job summary

TalentCORE, Inc. in Poway, CA is seeking a Project Manager to assess and mitigate supplier cybersecurity and supply chain risks affecting program execution and compliance.

The role requires coordinating with supply chain, program management, engineering, cybersecurity, and suppliers to address risk, resilience, and regulatory concerns, with emphasis on DoD cybersecurity requirements and NIST guidelines.

Qualifications

• Bachelor’s degree in business, supply chain, cybersecurity, engineering, or related field; 11+ years of relevant experience.
• Working knowledge of defense cybersecurity requirements (DFARS, NIST SP 800-171, CMMC).
• Certifications such as CISSP, CompTIA Security+, CISA, or CMMC are highly desirable.
• Preference for applicants with third-party/vendor risk management and/or supply chain experience.

Responsibilities

• Administer and support third party risk management by collecting and assessing supplier cybersecurity information (SOC 2, SPRS, CMMC).
• Evaluate supplier cybersecurity posture against DFARS; identify gaps and track remediation.
• Coordinate with suppliers to remediate cybersecurity gaps and ensure regulatory compliance.
• Collaborate with cybersecurity, compliance, and legal teams to document and escalate supplier risk.

Skills

Supply chain risk management

Cybersecurity requirements

Regulatory compliance

Stakeholder communication

Analytical thinking

Leadership

Education

Bachelor’s degree + 11+ years experience

Experience in supply chain, risk management, cybersecurity, or defense programs

Tools

SAP

Optro (AuditBoard)

Altana

Bitsight

Resilinc

Microsoft Office

Job description

TalentCORE, Inc. in Poway, CA is seeking a Project Manager to assess and mitigate supplier cybersecurity and supply chain risks affecting program execution and compliance.

The role requires coordinating with supply chain, program management, engineering, cybersecurity, and suppliers to address risk, resilience, and regulatory concerns, with emphasis on DoD cybersecurity requirements and NIST guidelines.