网络安全供应链风险分析师
Cybersecurity Supply Chain Risk Analyst
9th Way Insignia 是一家服务受创者拥有的小型企业，为我们的政府客户带来变革性技术，使他们能够实现自己的任务。我们的专长包括网络安全、云现代化、软件开发、数据分析、企业架构、企业IT、分析、流程自动化和人工智能。了解更多关于 9th Way Insignia 的信息，请访问
申请密码：Niner
项目介绍
美国退伍军人事务部网络安全运营与服务企业（COSE）项目为 VA 系统、数据和任务交付提供企业级网络安全运营、工程、架构、风险和合规支持。该团队帮助加强退伍军人、他们的家庭以及 VA 员工所依赖的数字服务的网络韧性。
9th Way Insignia 正在寻找一名网络安全供应链风险分析师来支持此项目。该职位取决于合同授予。
专业级别
E3 – 工程师
职责
- 评估与供应商、产品、服务、软件和第三方依赖相关的网络安全供应链风险。
- 记录供应链安全要求、风险发现、缓解措施和接受决策。
- 审查供应商安全证据、软硬件来源信息、漏洞通知和修复计划。
- 与采购、工程、安全、法律和项目相关方协调第三方风险决策。
- 支持对供应商风险、新兴威胁和纠正措施状态的持续监控。
要求
- 网络安全、信息系统、供应链管理、商业、工程或相关领域的学士学位，或同等的相关经验。
- 五年或以上网络安全、第三方风险、供应链风险、GRC、安全评估或相关经验。
- 有进行供应商或产品安全评估并记录风险、控制和修复措施的经验。
- 熟悉网络安全供应链风险管理实践、NIST 指南、软件供应链风险和第三方安全控制。
- 具备较强的风险分析、文档编写、利益相关者沟通和判断能力。
薪资范围
98,135—125,000 美元
9th Way Insignia 对于此职位级别的薪资范围仅为一般指导，并非补偿或薪资的保证。在发出录用通知时还会考虑其他因素。
查看英文原文
9th Way Insignia is a service-disabled, veteran-owned small business bringing transformative technology to our government customers so they can achieve their missions. Our specialties include cybersecurity, cloud modernization, software development, data analytics, enterprise architecture, enterprise IT, analytics, process automation, and artificial intelligence. Learn more about 9th Way Insignia at
Application password: Niner
Project Introduction
The Department of Veterans Affairs Cybersecurity Operations and Services Enterprise (COSE) program delivers the enterprise cybersecurity operations, engineering, architecture, risk, and compliance support that safeguards VA systems, data, and mission delivery. The team helps strengthen the cyber resilience of the digital services relied on by Veterans, their families, and the VA workforce.
9th Way Insignia is seeking a Cybersecurity Supply Chain Risk Analyst to support this program. This position is contingent upon contract award.
Professional Level
E3 – Engineer
Responsibilities
- Assess cybersecurity supply-chain risks associated with vendors, products, services, software, and third-party dependencies.
- Document supply-chain security requirements, risk findings, mitigations, and acceptance decisions.
- Review supplier security evidence, software and hardware provenance information, vulnerability notices, and remediation plans.
- Coordinate with acquisition, engineering, security, legal, and program stakeholders on third-party risk decisions.
- Support continuous monitoring of supplier risks, emerging threats, and corrective-action status.
Requirements
- Bachelor's degree in cybersecurity, information systems, supply-chain management, business, engineering, or a related field, or equivalent relevant experience.
- Five or more years of cybersecurity, third-party risk, supply-chain risk, GRC, security assessment, or related experience.
- Experience conducting vendor or product security assessments and documenting risks, controls, and remediation actions.
- Working knowledge of cybersecurity supply-chain risk management practices, NIST guidance, software supply-chain risks, and third-party security controls.
- Strong risk-analysis, documentation, stakeholder-engagement, and judgment skills.
Salary Range
$98,135—$125,000 USD
9th Way Insignia’s range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
Clearance/Background Investigation
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.
Benefits
Eligible employees will have access to our comprehensive benefits package which includes Medical, Dental, Vision, Voluntary Life Insurance, 401(k), Basic Life A&D, STD, LTD, PTO, Telehealth, paid holidays, FSA, HSA. Additional resources include our Employee Assistance Program (EAP) and Traveling Assistance.
Legal
We’re an equal employment opportunity employer that empowers our people to fearlessly drive change – no matter their race, color, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, age, marital status, sexual orientation, gender identity, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, or local law.
Equal Employment Opportunity Notice
Applicants have the right to be free from unlawful workplace discrimination. Please review the EEOC’s Know Your Rights: Workplace Discrimination is Illegal notice. Accessible formats and translations are also available from the EEOC.
Application Accommodations
If you require a reasonable accommodation to complete this application or participate in the hiring process, please contact . Requests will be considered individually.
Originally posted on Himalayas