Supply Chain Risk Management, Sr.

Draper Labs; Huntsville (AL); On-site; USD 95,000 - 245,000; Full time

Job summary

Draper is seeking a Senior Supply Chain Risk Management Analyst to assess and secure defense program supply chains, implementing NIST 800-53 Rev 5 controls and managing supplier risk across ICT, hardware, and OT. The role requires strong analytical skills and collaboration with engineering, operations, and security teams.

Responsibilities include leading vulnerability analyses, evaluating supplier practices, and presenting findings to executive leadership, with readiness to adapt to evolving

Qualifications

• Bachelor's degree required; DoD or federal program experience preferred.
• 8+ years general experience; 6+ years in functional responsibility area; Master’s may substitute 4 years.

Responsibilities

• Lead vulnerability identification across defense program supply chains.
• Assess supplier security practices for compliance and provide recommendations.
• Present complex risk assessments to leadership and customers.
• Monitor changes affecting supply chain risk and escalate mitigations.
• Improve Draper's SCRM framework with stakeholder input and regulatory updates.
• Perform data-driven analysis to identify trends and mitigation strategies in supplier quality.

Skills

Cybersecurity risk knowledge

NIST 800-53/161 Rev 5

DFARS/FAR/DoD compliance

Communication with leadership

Cross-functional collaboration

Analytical problem solving

Quality standards (ISO 9001/AS9100)

Education

Bachelor's Degree or equivalent

Job description

Overview:

Draper is an independent, nonprofit research and development company headquartered in Cambridge, MA. The 2,000+ employees of Draper tackle important national challenges with a promise of delivering successful and usable solutions. From military defense and space exploration to biomedical engineering, lives often depend on the solutions we provide. Our multidisciplinary teams of engineers and scientists work in a collaborative environment that inspires the cross-fertilization of ideas necessary for true innovation. For more information about Draper, visit www.draper.com.

Job Description Summary:

The Supply Chain Risk Management Analyst, Senior is responsible for the accurate assessment and analysis of DIB suppliers in support of defense programs, securing complex, globally distributed ICT, hardware, and operational technology supply chains. This position entails a focused commitment to critically assessing companies in the defense industrial base and managing the implementation of Supply Chain Risk Management NIST 800-53 Rev 5 control family to manage risks in the supply chain. The incumbent is experienced in identifying, assessing, and recommending mitigation risks associated with products, services, suppliers and procurement activities across specific defense programs and the enterprise. This position leverages existing supply chain risk technologies and stringent organizational protocols to ensure analysis and processes are timely and processed in a manner that complies with program supply chain risk management policy requirements.

Job Description:

Duties / Responsibilities

• Lead vulnerability identification activities by conducting advanced analysis of systems, programs and architectures to determine crucial components, high-risk areas, and potential impacts across defense program supply chains.
• Conduct independent assessments and validations of supplier security practices to ensure compliance with federal defense and organizational requirements; document findings and provide expert recommendations to leadership and customers.
• Compile, synthesize and present complex risk assessments to internal stakeholders, executive leadership, and external customers to support informed decision making.
• Monitor and document major changes affective supply chain risk, quality, resilience, and compliance, ensuring that risks are escalated and mitigated proactively.
• Evaluate enterprise and supplier-level risks within Draper's SCRM programs, identifying systemic issues and recommending improvements to strengthen program maturity.
• Drive enhancements to the existing SCRM framework by incorporating stakeholder feedback, industry best practices and emerging regulatory requirements; lead implementation of approved updates.
• Perform rigorous quality checks of supplier reviews, ensuring data accuracy, completeness, and analytical integrity; investigate discrepancies and deliver corrective action guidance.
• Collaborate cross functionally with engineering, product development, operations and security teams to ensure SCRM processes, standards and operations align with enterprise policies and strategic goals.
• Analyst multi-source data to identify trends in supplier quality, product defects, or recurring vulnerabilities, and develop mitigation strategies to prevent future occurrences.
• Maintain readiness to perform additional responsibilities in support of evolving organizational needs.

Skills/Abilities

• Deep familiarity with cybersecurity supply chain risks and the broader defense industrial base
• Strong working knowledge of NIST 800-161 Rev. 1, ISO 28000, ICD-73 series, and SCRM NIST 800-53 control family to mitigate risks in the supply chain, with experience drafting documentation to support compliance and process.
• Expert understanding of DFARS, FAR, TAA, and supply chain relevant compliance topics: NDAA 889, 1260H, nearshore/offshore guidance, country of origin risks and critical supply chain considerations.
• Ability to operate as an independent, action-oriented self-starter, prioritizing and managing multiple workstreams in a fast-paced environment.
• Proven success working within cross functional teams, adapting to changing priorities and providing leadership within complex matrixed environments.
• Familiarity with Quality Standards ISO 9001:2015 and AS9100 with demonstrated ability to integrate quality principals into supply chain risk processes.
• Advances skills in process integration include building workflows, identifying gaps and developing improvements to increase efficiency and reduce risk.
• Excellent interpersonal and communication skills, capable of conveying technical information clearly to both technical and non-technical audiences.
• Excellent time management skills with the proven ability to meet deadlines.
• Strong analytical and problem-solving skills.
• Outstanding written and oral communication skills, including development of formal assessments, reports and presentations.

Education

• Bachelor's Degree or an equivalent combination of formal education

Experience

• Minimum of eight (8) years of general experience and six (6) years of experience in the Functional Responsibility area. A Masters Degree may be substituted for four (4) years of general work experience.
• Experience with implementing supply chain risk management activities in the DoD or other Federal Organizations

Additional Job Description:

Security Requirement

• Applicants selected for this position will be required to obtain and maintain a government security clearance.
• Secret Clearance required Applicants selected will be subject to a U.S. Government security investigation. U.S. citizenship is required, no dual citizenship.

Job Location - City:

Cambridge

Job Location - State:

Massachusetts

Job Location - Postal Code:

02139-3563

The US base salary range for this full-time position is

$95,000.00 - $245,000.00

Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target salaries for the position across all US locations.

Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Union ranges will be in compliance with the collective bargaining agreement's approved rates by location and role. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.Please note that the compensation details listed in US role postings reflect the base salary only, and does not include bonuses or benefits.

Our work is very important to us, but so is our life outside of work. Draper supports many programs to improve work-life balance including workplace flexibility, employee clubs ranging from photography to yoga, health and finance workshops, off site social events and discounts to local museums and cultural activities.

Draper is committed to creating an inclusive environment. We understand the value of inclusivity and its impact on a high-performance culture. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, national origin, veteran status, or genetic information. Draper is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation, please contact [e-mail].