Senior Cyber-Supply Chain Risk Management Specialist

What you'll do

• Maintain and evolve the enterprise C-SCRM control framework.
• Lead verification of control implementation for audits and assessments.
• Develop critical program governance documentation for C-SCRM lifecycle.
• Coordinate with cross-functional teams to operationalize C-SCRM controls.
• Support mapping of policies/controls to external standards and frameworks.
• Prepare evidence packages and narratives for audit and certification activities.
• Provide guidance on secure software supply chain practices and expectations.

What we're looking for

• 10+ years of experience in risk management, governance, and cybersecurity regulatory requirements.
• 5+ years of expertise with NIST, CMMC, ISO, GDPR, ITAR or similar cybersecurity frameworks.
• 3+ years supporting internal/external audits, customer RFIs, certifications, and assessment programs.
• Experience developing and managing governance processes and leading process improvement initiatives.
• Proficiency in vendor/supplier risk management, continuous monitoring, and threat intelligence feeds application.