Cybersecurity Contractor Jobs in Layton, UT (NOW HIRING)

We are looking for a Project Manager II - Supply Chain Risk Management (SCRM) & Program Protection to join the Minuteman III Program Protection and Supply Chain Risk Management team. This position will support the identification, assessment, documentation, mitigation, and monitoring of supply chain and program protection risks across MMIII sustainment programs.
The selected candidate will work under the direction of the SCRM/Program Protection Program Manager and will be responsible for performing research, developing risk assessments, coordinating with technical and program stakeholders, supporting Program Protection activities, tracking mitigation actions, and developing products used to support program and government decision-making.
This role requires someone who is curious, organized, analytical, and comfortable working with incomplete or fragmented information. The successful candidate should be able to research an unfamiliar issue, determine what information is missing, work with the appropriate subject matter experts, and turn the information into a clear risk assessment or recommendation.
The position works across multiple functional organizations, including Program Protection, SCRM, program management, engineering, logistics, cybersecurity, intelligence, DMSMS, Supply Assurance Management (SAM), contracting, supplier management, and government stakeholders. The goal is not simply to identify supply chain concerns, but to understand how those concerns could affect the security, integrity, availability, reliability, and long-term sustainment of the MMIII weapon system.In This Job, You Will

• Conduct supplier, vendor, component, part, and supply-chain research to identify potential SCRM and Program Protection risks and vulnerabilities.
• Develop and support Vendor Health Assessments (VHAs) and other supplier, vendor, component, and part-level risk assessments using available commercial, government, program, and other approved information sources.
• Analyze potential risks involving foreign ownership, control or influence; foreign sourcing; geographic concentration; critical and strategic materials; critical minerals; single/sole-source suppliers; financial or operational instability; cybersecurity; counterfeit concerns; obsolescence/DMSMS; manufacturing dependencies; long lead times; and other supply-chain vulnerabilities.
• Evaluate available sustainment and supply data, including stock on hand, consumption history, lead times, sourcing limitations, supplier availability, procurement history, and supplier dependencies to help determine potential operational and sustainment impacts.
• Research geopolitical events, supplier disruptions, cyber incidents, natural disasters, regulatory or trade changes, material shortages, manufacturing disruptions, and other emerging issues to determine whether they could affect MMIII suppliers, materials, components, or sustainment activities.
• Support critical material and critical mineral assessments, including identifying dependencies on foreign sources, countries of concern, concentrated global production or processing, and vulnerable lower-tier suppliers.
• Support Program Protection reviews for new or modified components, suppliers, technical changes, contracts, task efforts, and other program activities to help determine applicable protection requirements.
• Assist in the development, review, and maintenance of applicable Program Protection and SCRM documentation, including Program Protection Plans (PPPs), SCRM plans, Program Protection Implementation Plans (PPIPs), Program Protection Assessments (PPAs), Memorandums for Record (MFRs), risk assessments, and related program artifacts, as applicable to the effort.
• Work with Program Protection, cybersecurity, engineering, intelligence, logistics, contracting, DMSMS, SAM, supplier management, program offices, and other subject matter experts to determine whether identified concerns require additional analysis, protection measures, mitigation, monitoring, or escalation.
• Develop clear and supportable risk statements describing the identified condition or threat, cause, potential consequence, likelihood, impact/severity, and recommended mitigation.
• Support and maintain the SCRM/Program Protection risk register, including documenting identified risks, risk owners, mitigation actions, preventative actions, contingency plans, due dates, status, supporting evidence, and closure criteria.
• Develop practical mitigation recommendations based on identified risks. Mitigation may include alternate sourcing, additional supplier qualification, increased inventory, supplier engagement, contractual protections, cybersecurity controls, technical changes, additional monitoring, or other appropriate risk treatments.
• Coordinate with responsible stakeholders to track mitigation activities and determine whether risk exposure has been reduced or additional action is necessary.
• Participate in IPT meetings, program reviews, SCRM and Program Protection working groups, supplier discussions, logistics meetings, engineering meetings, government/customer meetings, and other program forums as required.
• Prepare and present risk assessments, Vendor Health Assessments, leadership briefings, decision materials, meeting products, risk summaries, status reports, and recommendations for program and government stakeholders.
• Translate technical, supplier, intelligence-informed, logistics, and supply-chain information into concise products that clearly communicate what the risk is, why it matters, potential program impact, and what can be done about it.
• Independently manage assigned assessments and actions from initial identification through research, coordination, documentation, mitigation planning, reporting, and closure while seeking guidance when appropriate.
• Track assigned actions, suspense dates, stakeholder inputs, documentation, and mitigation activities to ensure work is completed accurately and on time.
• Maintain supporting evidence and documentation so SCRM and Program Protection assessments, decisions, recommendations, and mitigation actions are traceable, repeatable, and defensible.
• Identify gaps in available information and coordinate with appropriate organizations to obtain the data necessary to complete an assessment.
• Escalate significant or emerging risks when potential impacts require additional technical review, leadership awareness, government involvement, or program-level action.
• Assist with improving and standardizing SCRM and Program Protection processes, templates, assessment methodologies, continuity guides, trackers, risk documentation, and reporting products.
• Use Microsoft Excel, PowerPoint, Word, Teams, SharePoint, and other program-approved systems and analytical tools to perform research, manage data, document assessments, coordinate actions, and communicate results.

A successful candidate will be comfortable being given a problem that may not initially have a clear answer. They should be willing to research the issue, ask questions, work with subject matter experts, challenge assumptions when appropriate, identify gaps in available information, and develop a supportable recommendation.
This position is well suited for someone with experience in project management, cybersecurity, intelligence, logistics, supply chain, engineering support, business analysis, or defense programs who is interested in developing deeper expertise in Supply Chain Risk Management and Program Protection.
The individual should be able to grow from supporting assessments and program activities into independently managing assigned SCRM and Program Protection efforts, while recognizing when an issue requires escalation or additional technical expertise.
#ASFS
Required Skills and Education

• Bachelor's degree and applicable experience in project/program management, supply chain, logistics, cybersecurity, intelligence, engineering support, business operations, defense programs, or a related field. Additional relevant experience may be considered in lieu of a degree based on applicable company/job-family requirements.
• Demonstrated ability to conduct research, evaluate information from multiple sources, identify relevant information, and develop logical conclusions or recommendations.
• Strong analytical and problem-solving skills with the ability to work through unfamiliar or complex issues.
• Ability to take fragmented or incomplete information, determine what additional information is required, and coordinate with appropriate stakeholders to develop a complete assessment.
• Strong organizational skills with the ability to manage multiple assignments, priorities, suspense dates, stakeholders, and deliverables simultaneously.
• Ability to develop clear written products, including risk assessments, status reports, action items, presentations, summaries, and leadership updates.
• Strong written and verbal communication skills with the ability to communicate with both technical and non-technical personnel.
• Ability to work collaboratively across multiple functional organizations while also independently managing assigned work.
• Ability to exercise sound judgment, recognize when additional expertise or leadership involvement is required, and appropriately elevate significant risks or issues.
• Ability to learn new technical, supply-chain, sustainment, and Program Protection concepts and apply them to real-world program issues.
• Proficiency with Microsoft Office applications, particularly Excel, PowerPoint, Word, Outlook, Teams, and SharePoint.
• Ability to handle sensitive program information and comply with applicable company, contractual, customer, and government policies and procedures.
• Ability to obtain and maintain the security clearance required for the position.

About BAE Systems Intelligence & Security
BAE Systems, Inc. is the U.S. subsidiary of BAE Systems plc, an international defense, aerospace and security company which delivers a full range of products and services for air, land and naval forces, as well as advanced electronics, security, information technology solutions and customer support services. Improving the future and protecting lives is an ambitious mission, but it's what we do at BAE Systems. Working here means using your passion and ingenuity where it counts - defending national security with breakthrough technology, superior products, and intelligence solutions. As you develop the latest technology and defend national security, you will continually hone your skills on a team-making a big impact on a global scale. At BAE Systems, you'll find a rewarding career that truly makes a difference.
Intelligence & Security (I&S), based in McLean, Virginia, designs and delivers advanced defense, intelligence, and security solutions that support the important missions of our customers. Our pride and dedication shows in everything we do-from intelligence analysis, cyber operations and IT expertise to systems development, systems integration, and operations and maintenance services. Knowing that our work enables the U.S. military and government to recognize, manage and defeat threats inspires us to push ourselves and our technologies to new levels.
This position will be posted for at least 5 calendar days. The posting will remain active until the position is filled, or a qualified pool of candidates is identified.
Preferred Skills and Education

• Experience supporting Department of War, U.S. Air Force, nuclear enterprise, aerospace, weapon-system sustainment, acquisition, logistics, cybersecurity, intelligence, engineering, or other defense programs.
• Experience or familiarity with Supply Chain Risk Management, Program Protection, supplier risk, cybersecurity, DMSMS, logistics lifecycle management, acquisition, or sustainment.
• Experience conducting supplier, vendor, component, or supply-chain research and developing assessments or recommendations from the results.
• Familiarity with supply-chain risk factors such as foreign dependencies, critical materials/minerals, single/sole-source suppliers, lower-tier supplier visibility, obsolescence, long lead times, geopolitical risk, cybersecurity, and supplier financial or operational health.
• Familiarity with risk management concepts, including risk identification, likelihood and consequence assessment, mitigation development, risk registers, preventative actions, contingency planning, and risk monitoring.
• Familiarity with DoW or Air Force Program Protection concepts, processes, documentation, or requirements.
• Experience working with engineers, logisticians, cybersecurity professionals, intelligence analysts, contracting personnel, suppliers, program managers, or government customers.
• Experience developing and presenting briefings or recommendations to program leadership or customers.
• Relevant education, training, or certifications such as DAU coursework, Program Protection/SCRM training, PMP, CAPM, Lean Six Sigma, supply-chain/logistics certifications, cybersecurity certifications, or similar professional development.

Experience with data analysis, supplier intelligence, supply-chain mapping, risk visualization, or government/commercial supply-chain analysis tools is beneficial but not required