Strategic Supply Chain & Cybersecurity Risk Lead

General Atomics Aeronautical Systems; Poway (CA); On-site; USD 100,000 - 183,000; Full time

Job summary

General Atomics Aeronautical Systems, Inc. (GA-ASI) seeks a senior risk and cybersecurity professional to assess supplier risks and ensure regulatory compliance across the supply chain.

You will liaise with supply chain, program management, engineering, cybersecurity, and suppliers to mitigate third-party risk and support program execution. Responsibilities include reviewing SOC 2, SPRS, and CMMC artifacts, tracking remediation, and communicating risk findings.

Qualifications

• Bachelor’s degree in business, supply chain, cybersecurity, engineering, or related discipline and 11+ years of progressively complex experience.
• Working knowledge of cybersecurity requirements within the defense industrial base (DFARS, NIST SP 800-171, CMMC).
• CISSP/CompTIA Security+/CISA or CMMC certification is highly desirable.
• Experience in third party or vendor risk management and supply chain/procurement exposure preferred.

Responsibilities

• Administer third party risk management program—collect, review, and assess supplier cybersecurity information (SOC 2, SPRS, CMMC).
• Evaluate supplier posture against DFARS, identify gaps, and track remediation to closure.
• Coordinate with suppliers to communicate findings and drive remediation activities.
• Ensure risk is documented, monitored, and reflected in onboarding and performance reviews.
• Develop processes aligning supply chain risk management with NIST SP 800-161 and DoD requirements.
• Prepare progress reports and briefings for stakeholders and customers.

Skills

Third-party risk management

Cybersecurity compliance

Supply chain risk management

Regulatory compliance

Risk assessment

Data analysis

Stakeholder communication

Education

Bachelor’s degree

Tools

SAP

Optro (AuditBoard)

Altana

Bitsight

Resilinc

Microsoft Office

Job description

General Atomics Aeronautical Systems, Inc. (GA-ASI) seeks a senior risk and cybersecurity professional to assess supplier risks and ensure regulatory compliance across the supply chain.

You will liaise with supply chain, program management, engineering, cybersecurity, and suppliers to mitigate third-party risk and support program execution. Responsibilities include reviewing SOC 2, SPRS, and CMMC artifacts, tracking remediation, and communicating risk findings.