[Hiring] Cybersecurity Supply Chain Risk Analyst @9th Way Insignia

Role Description

9th Way Insignia is seeking a Cybersecurity Supply Chain Risk Analyst to support the Department of Veterans Affairs Cybersecurity Operations and Services Enterprise (COSE) program. This position is contingent upon contract award.

• Assess cybersecurity supply-chain risks associated with vendors, products, services, software, and third-party dependencies.
• Document supply-chain security requirements, risk findings, mitigations, and acceptance decisions.
• Review supplier security evidence, software and hardware provenance information, vulnerability notices, and remediation plans.
• Coordinate with acquisition, engineering, security, legal, and program stakeholders on third-party risk decisions.
• Support continuous monitoring of supplier risks, emerging threats, and corrective-action status.

Qualifications

• Bachelor's degree in cybersecurity, information systems, supply-chain management, business, engineering, or a related field, or equivalent relevant experience.
• Five or more years of cybersecurity, third-party risk, supply-chain risk, GRC, security assessment, or related experience.
• Experience conducting vendor or product security assessments and documenting risks, controls, and remediation actions.
• Working knowledge of cybersecurity supply-chain risk management practices, NIST guidance, software supply-chain risks, and third-party security controls.
• Strong risk-analysis, documentation, stakeholder-engagement, and judgment skills.

Requirements

• Salary Range: $98,135 — $125,000 USD
• Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

Benefits

• Medical, Dental, Vision
• Voluntary Life Insurance
• 401(k)
• Basic Life A&D
• STD, LTD
• PTO
• Telehealth
• Paid holidays
• FSA, HSA
• Employee Assistance Program (EAP)
• Traveling Assistance