Third-Party & Supply Chain Risk Analyst

True Anomaly, Inc.; Denver, Long Beach, Washington (CO, CA, District of Columbia); On-site; USD 95,000 - 120,000; Full time

Job summary

True Anomaly, Inc. is seeking a driven Third-Party & Supply Chain Risk Analyst to own TPVRM and C-SCRM programs.

You will assess suppliers and subcontractors, trace risk through hardware and software supply chains, and track remediation to inform executive decisions. Reporting to the Senior Enterprise Risk Manager, you will build a robust data foundation enabling informed sourcing decisions and risk prioritization across our vendor network.

Qualifications

• Experience in TPVRM and C-SCRM programs.
• Knowledge of NIST RMF framework.

Responsibilities

• Assess suppliers and subcontractors across hardware and software supply chains.
• Track remediation and report risk to executives.
• Build data foundations for executive decision-making.

Skills

Vendor risk

Third-party risk

Risk assessment

NIST RMF

C-SCRM

Job description

Denver, CO or Long Beach, CA or Washington, DC

Space is a warfighting domain. True Anomaly seeks those with the talent and ambition to build the technology that secures it.

OUR MISSION

True Anomaly delivers decisive capabilities for space superiority. We build autonomous spacecraft, advanced payloads, mission software, and space-based interceptors — enabling the U.S. and its Allies to secure the space environment and counter threats from the ultimate high ground.

OUR VALUES

• Be the offset.We create asymmetric advantages with creativity and ingenuity.
• What would it take?We challenge assumptions to deliver ambitious results.
• It’s the people.Our team is our competitive advantage and we are better together.

Your Mission

We are seeking a driven and detail-oriented Third-Party & Supply Chain Risk Analyst to own the day-to-day execution of our Third-Party Vendor Risk Management (TPVRM) and Cyber Supply Chain Risk Management (C-SCRM) programs, with a secondary line of effort supporting the broader Enterprise Risk Management (ERM) function. Reporting to the Senior Enterprise Risk Manager, you will play a hands-on role assessing suppliers and subcontractors, tracing risk through our hardware and software supply chains, tracking remediation, and building the data foundation that powers executive-level decisions about who we buy from and depend on.

This role is ideal for a mid-career risk professional who is fluent in frameworks such as NIST RMF,