Cyber Supply Chain Risk Management Specialist

Pay Competitive

Employment type:

Full-Time

• Req#: 6250

Are you up for the challenge? Do you want free money in your 401k? Do you want job security and a company that invests in you? You need to check us out!

In this exciting role, you will work with real-time data and create tools using cutting-edge visualization, development, and analytic technologies.

ALONG WITH COMPETITIVE SALARIES AND OUR COMPREHENSIVE BENEFITS, WE

OFFER:

• Employee Performance Incentives
• Ongoing Training Opportunities
• Boeing Employee Discount Program
• Health Insurance Opt-out Incentives
• Generous 401k Contribution – 10% contribution (NOT A MATCH)
• Student Debt Payoff
• Up to $30k Tuition Assistance
• HSA Contributions
• Professional Development Program

Every day, Boeing Intelligence & Analytics supports global missions by building and delivering intelligence, analytics, and cyber solutions that enable users to advance national security. We have provided our customers with the tools needed to counter evolving global and cyber threats, and to improve wartime decision making. Our talented employees bring software development, systems engineering, and advanced analytics expertise. We offer numerous prime contract opportunities with customers headquartered in Maryland, Virginia, and the District of Columbia, as well as subcontract opportunities that align with our areas of focus and additional opportunities nationwide through our parent company.

What you will do (day in the life):

As a Cyber Supply Chain Risk Management Specialist, you will communicate and collaborate with key stakeholders across the enterprise in regards to cybersecurity related matters. Define and maintain policies, procedures, control objectives and publish implementation guidance. Define policy compliance measures and consult on regulatory compliance. Define and perform vulnerability assessments leveraging threat analysis, known vulnerabilities, and business value to scope and prioritize efforts.

Identify the operational environment, the threat against it, the potential impact to it and the most likely courses of adversarial action upon it. Define and manage cybersecurity risk management processes. Perform due diligence for mergers and acquisitions, ensuring cybersecurity risks are escalated to the appropriate management level for action. Act as the primary cybersecurity interface to non-fully integrated subsidiaries, enabling technical interchange and consistent business priorities for Information Security efforts.

Provide supply chain cybersecurity risk management requirements and collaborate with procurement agents and other Supply Chain functional representatives to implement supply chain cybersecurity.

Boeing Intelligence & Analytics (BI&A) is seeking a Cyber‑Supply Chain Risk Management Specialist to join the GMD Systems Integration, Test & Readiness (SITR) program.

Work Location: Huntsville, AL

Telework Availability:
This position is expected to be 100% onsite.

A Cyber Supply Chain Risk Management Specialist evaluates risks associated with the procurement and maintenance of hardware, software, and firmware critical items, and recommends mitigations to program procurement strategies.

• Perform cybersecurity risk management and/or policy development and deployment.
• Perform and participate in cybersecurity assessments and audits both in terms of controls and risks.
• Conduct vendor risk assessments using the Cyber Supply Chain Risk Management (C‑SCRM) processes.
• Prepare, review, and present technical reports and briefings.
• Ensure compliance with C-SCRM policies and standards.
• Develop and implement SCRM mitigation strategies.
• Identify and contribute to the identification of root causes, prioritize threats and recommend and/or implement corrective action.
• Develop and maintain effective, accurate, and timely reporting and metrics.
• Provide technical guidance within a defined organizational team.
• Explore the enterprise for evolving state of knowledge and methods regarding cybersecurity best practices.
• Support the development of enterprise-wide cybersecurity policies, standards, guidelines and procedures that may reach across multiple…