[Hiring] Senior Risk & Compliance Analyst @Connected Logistics

Role Description

Contingent Upon Contract Award

Remote with occasional on-site support

Connected Logistics is seeking a Senior Risk & Compliance Analyst (C-SCRM Lead) to support the Cybersecurity Architecture and Engineering Services supporting the Department of Veterans Affairs (VA) Office of Information Security (OIS) Cybersecurity Operations Systems Engineering (COSE) program.

The Senior Risk & Compliance Analyst (C-SCRM Lead) serves as the lead subject matter expert for cybersecurity risk management, compliance, and Cybersecurity Supply Chain Risk Management (C-SCRM). This position provides expertise in conducting IT security risk assessments, threat and vulnerability analysis, and security control assessments to identify and evaluate risks to organizational systems, platforms, applications, data, and supporting technology supply chains. The Senior Risk & Compliance Analyst assesses the potential exposure of proprietary, sensitive, and mission-critical information resulting from weaknesses in technology platforms, security controls, access procedures, system configurations, third-party products and services, or other forms of access to organizational systems and data. The role leads C-SCRM activities and supports the identification, documentation, prioritization, mitigation, and continuous monitoring of cybersecurity and supply chain risks throughout the system and acquisition lifecycle.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Information Systems, Risk Management or a related technical discipline or an Associate's degree in the above discipline with an additional 2 years of experience.
• Minimum of five (5) years of relevant professional experience in cybersecurity, information security, IT risk management, security compliance, security assessment, C-SCRM, or a related field.
• Demonstrated experience conducting IT security risk assessments, threat analyses, and security control assessments.
• Experience identifying and evaluating cybersecurity risks associated with system vulnerabilities, access controls, security procedures, technical platforms, applications, and organizational data.
• Experience assessing risk and recommending appropriate security controls, mitigation strategies, remediation actions, and risk treatment approaches.
• Knowledge of cybersecurity risk management concepts, assessment methodologies, security controls, vulnerability management, compliance, and continuous monitoring.
• Ability to analyze technical and cybersecurity information and translate findings into understandable risk statements and actionable recommendations for technical and non-technical stakeholders.
• Strong analytical, documentation, communication, and stakeholder coordination skills.
• Ability to develop high-quality security assessment reports, risk documentation, compliance artifacts, and executive-level risk summaries.

Requirements

• Public Trust: T4 or T5 (TS)
• Experience leading or supporting Cybersecurity Supply Chain Risk Management (C-SCRM) programs, assessments, or governance activities in a federal environment.
• Working knowledge of NIST Risk Management Framework (RMF) principles and federal cybersecurity risk management practices.
• Experience evaluating cybersecurity risks associated with third-party vendors, suppliers, software, hardware, cloud services, and externally provided technology services.
• Experience supporting security authorization, continuous monitoring, security control assessment, vulnerability management, risk remediation, and POA&M processes.
• Experience developing and maintaining enterprise or program-level cybersecurity and C-SCRM risk registers, risk scoring methodologies, mitigation plans, and reporting metrics.
• Experience integrating cybersecurity risk considerations into system acquisition, engineering, architecture, DevSecOps, and lifecycle management processes.
• Familiarity with federal cybersecurity and supply chain security standards, guidance, and control frameworks applicable to C-SCRM and IT risk management.
• Experience communicating complex cybersecurity and supply chain risks to senior leadership and providing clear recommendations that support informed risk decisions.
• Relevant cybersecurity, risk management, audit, or governance certifications are preferred, such as CISSP, CISM, CRISC, CAP/CGRC, or equivalent credentials.

Benefits

• The anticipated salary range for this position is $115,000.00-$125,000.00 USD.
• Robust benefits package including health, dental, vision, life, and disability insurance.
• Great 401(k) package.
• Generous Paid Time Off.