Huntington Ingalls Industries
Cyber SCRM Analyst - Hybrid (Intelligence Analyst 4) - 20985
Huntington Ingalls Industries, Woodlawn, Maryland, United States,
Requisition Number: 20985Required Travel: 0 - 10%Employment Type: Full Time/Salaried/ExemptAnticipated Salary Range: $98,933.00 - $145,000.00Security Clearance: TS/SCILevel of Experience: Mid HIThis opportunity resides with
Command, Control, Communications, Computers, Cyber, Intelligence, Surveillance and Reconnaissance (C5ISR) , a business group within HII’s Mission Technologies division. HII - Mission Technologies is seeking a Cyber Supply Chain Risk Management (C-SCRM) Intelligence Analyst for a hybrid of telework and work at the client’s site in Baltimore (Woodlawn) MD. This position requires experience in supply chain management and risk assessment/mitigation methods along with a strong background in cybersecurity. The candidate selected for this position will support the Director, Division of Strategic Information (DSI), Center for Medicare and Medicaid Services (CMS) and other government personnel. Day to day activities include working with other contractors on the C-SCRM line of effort as they pertain to cyber supply chain risk management, especially those related to Information and Communications Technology (ICT) assets.What You Will Do
Advise CMS DSI personnel on cybersecurity supply chain risk management policy and standard operating procedures.Identify all CMS vendors/suppliers who have ICT products/services that connect to or traverse Centers for Medicare & Medicaid Services (CMS) networks.Review/evaluate products against known threats, known exploitable vulnerabilities (KEVs), and Common Vulnerabilities and Exposures (CVEs).Develop and maintain processes related to C-SCRM and ICT risk assessments.Analyze C-SCRM-related data and convey the threat level to senior leadership along with a recommendation on how to best mitigate risk.Evaluate and monitor software supplier adherence to Secure Software Development Framework (SSDF) attestations and other cybersecurity contractual requirements.Review and evaluate software supplier SBOMs for supply chain risks, and provide cyber-focused risk mitigation recommendations.Review and evaluate existing and prospective suppliers Service Organization Control (SOC) 2 reports.Review, evaluate, and continuously monitor prospective and existing supplier cyber hygiene.Develop the supplier cyber evaluation portion of the supply chain risk assessment reports.Collaborate and liaison with CMS' cybersecurity staff to gather and include relevant information into reports.Identify resources used to conduct or enhance the SCRA assessment and collaborate with the government to obtain access.Contribute to development and evaluation of pre-acquisition vendor/supplier questionnaires.Assist with development and implementation of cyber-related supplier risk event/incident responses.What We Are Looking For
9 years relevant experience with Bachelors in related field; 7 years relevant experience with Masters in related field; 4 years relevant experience with PhD or Juris Doctorate in related field; or High School Diploma or equivalent and 13 years relevant experience.Experience in supply chain risk.Familiarity with cybersecurity practices to integrate cybersecurity and C-SCRM.Knowledge of commercially available C-SCRM tools and proficiency in analyzing ICT products/services.Good quantitative and analytical skills.Demonstrated ability to use MS Office Suite to include Word, PowerPoint, and Excel.Superior oral and written communication skills.Ability to effectively interact with senior executives from Government and Industry.Ability to create and foster a cooperative work environment.Self-directed, detail oriented in completing assigned tasks.Availability for occasional travel.This position requires an active security clearance at the TS/SCI level.Preferred: Bonus Points For...
Bachelor's degree in business administration, supply chain management, logistics, cybersecurity, information technology, or related field.6+ years’ experience in supply chain risk, with a focus on cyber supply chain management (C-SCRM).Physical Requirements
May require working in an office, industrial, shipboard, or laboratory environment. Capable of climbing ladders and tolerating confined spaces and extreme temperature variances.HII is more than a job - it’s an opportunity to build a new future. We offer competitive benefits such as best-in-class medical, dental and vision plan choices; wellness resources; employee assistance programs; Savings Plan Options (401(k)); financial planning tools, life insurance; employee discounts; paid holidays and paid time off; tuition reimbursement; as well as early childhood and post-secondary education scholarships.Why HIIWe build the world’s most powerful, survivable naval ships and defense technology solutions that safeguard our seas, sky, land, space and cyber. Our diverse workforce includes skilled tradespeople; artificial intelligence, machine learning (AI/ML) experts; engineers; technologists; scientists; logistics experts; and business administration professionals.Recognized as one of America’s top large company employers, we are a values and ethics driven organization that puts people’s safety and well-being first.All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, physical or mental disability, age, or veteran status or any other basis protected by federal, state, or local law.Do You Need Assistance?If you need a reasonable accommodation for any part of the employment process, please send an e-mail to
buildyourcareer@hii-co.com
and let us know the nature of your request and your contact information.
#J-18808-Ljbffr
Command, Control, Communications, Computers, Cyber, Intelligence, Surveillance and Reconnaissance (C5ISR) , a business group within HII’s Mission Technologies division. HII - Mission Technologies is seeking a Cyber Supply Chain Risk Management (C-SCRM) Intelligence Analyst for a hybrid of telework and work at the client’s site in Baltimore (Woodlawn) MD. This position requires experience in supply chain management and risk assessment/mitigation methods along with a strong background in cybersecurity. The candidate selected for this position will support the Director, Division of Strategic Information (DSI), Center for Medicare and Medicaid Services (CMS) and other government personnel. Day to day activities include working with other contractors on the C-SCRM line of effort as they pertain to cyber supply chain risk management, especially those related to Information and Communications Technology (ICT) assets.What You Will Do
Advise CMS DSI personnel on cybersecurity supply chain risk management policy and standard operating procedures.Identify all CMS vendors/suppliers who have ICT products/services that connect to or traverse Centers for Medicare & Medicaid Services (CMS) networks.Review/evaluate products against known threats, known exploitable vulnerabilities (KEVs), and Common Vulnerabilities and Exposures (CVEs).Develop and maintain processes related to C-SCRM and ICT risk assessments.Analyze C-SCRM-related data and convey the threat level to senior leadership along with a recommendation on how to best mitigate risk.Evaluate and monitor software supplier adherence to Secure Software Development Framework (SSDF) attestations and other cybersecurity contractual requirements.Review and evaluate software supplier SBOMs for supply chain risks, and provide cyber-focused risk mitigation recommendations.Review and evaluate existing and prospective suppliers Service Organization Control (SOC) 2 reports.Review, evaluate, and continuously monitor prospective and existing supplier cyber hygiene.Develop the supplier cyber evaluation portion of the supply chain risk assessment reports.Collaborate and liaison with CMS' cybersecurity staff to gather and include relevant information into reports.Identify resources used to conduct or enhance the SCRA assessment and collaborate with the government to obtain access.Contribute to development and evaluation of pre-acquisition vendor/supplier questionnaires.Assist with development and implementation of cyber-related supplier risk event/incident responses.What We Are Looking For
9 years relevant experience with Bachelors in related field; 7 years relevant experience with Masters in related field; 4 years relevant experience with PhD or Juris Doctorate in related field; or High School Diploma or equivalent and 13 years relevant experience.Experience in supply chain risk.Familiarity with cybersecurity practices to integrate cybersecurity and C-SCRM.Knowledge of commercially available C-SCRM tools and proficiency in analyzing ICT products/services.Good quantitative and analytical skills.Demonstrated ability to use MS Office Suite to include Word, PowerPoint, and Excel.Superior oral and written communication skills.Ability to effectively interact with senior executives from Government and Industry.Ability to create and foster a cooperative work environment.Self-directed, detail oriented in completing assigned tasks.Availability for occasional travel.This position requires an active security clearance at the TS/SCI level.Preferred: Bonus Points For...
Bachelor's degree in business administration, supply chain management, logistics, cybersecurity, information technology, or related field.6+ years’ experience in supply chain risk, with a focus on cyber supply chain management (C-SCRM).Physical Requirements
May require working in an office, industrial, shipboard, or laboratory environment. Capable of climbing ladders and tolerating confined spaces and extreme temperature variances.HII is more than a job - it’s an opportunity to build a new future. We offer competitive benefits such as best-in-class medical, dental and vision plan choices; wellness resources; employee assistance programs; Savings Plan Options (401(k)); financial planning tools, life insurance; employee discounts; paid holidays and paid time off; tuition reimbursement; as well as early childhood and post-secondary education scholarships.Why HIIWe build the world’s most powerful, survivable naval ships and defense technology solutions that safeguard our seas, sky, land, space and cyber. Our diverse workforce includes skilled tradespeople; artificial intelligence, machine learning (AI/ML) experts; engineers; technologists; scientists; logistics experts; and business administration professionals.Recognized as one of America’s top large company employers, we are a values and ethics driven organization that puts people’s safety and well-being first.All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, physical or mental disability, age, or veteran status or any other basis protected by federal, state, or local law.Do You Need Assistance?If you need a reasonable accommodation for any part of the employment process, please send an e-mail to
buildyourcareer@hii-co.com
and let us know the nature of your request and your contact information.
#J-18808-Ljbffr