Manager Cyber Security Risk Analyst Jobs in Baltimore, MD

Leidos has an immediate need for a highly qualified Supply Chain Risk Management Analyst to support our Defense Information Systems Agency (DISA) customer.

The Risk Management Executive / Threat Mitigation Division's mission is to reduce risk to Strategic Mission by identifying and assessing assets and vulnerabilities to DISA provided mission critical infrastructure, ensuring availability and reliability to the Combatant Commands, Services, Agencies, and Mission Partners. This individual will collaborate directly with government customers in the creation of policy, processes, and implementation of appropriate Supply Chain Risk Management infrastructure to continuously assess, mitigate, and minimize risk to the Department's security and to the overall mission. The role will report directly to the Information Technology and Communications Supply Chain Risk Management (ICT-SCRM) Program Team Lead.

This position is located in Ft. Meade, Maryland.

Primary Responsibilities:

• Provide subject matter expertise in DoD ICT-SCRM to implement, expand, and mature an end-to-end ICT-SCRM program.
• Support the development and continued refinement/updates of Rick Management policy.
• Produce and present briefings of their findings, as well as meeting minutes, after action reports, trip reports, as necessary
• Support ICT-SCRM Commercial Assessments of Networks, Network availability, and germane hardware and software to protect DoD's mission critical functions.
• Conduct evaluations and prepare reports detailing any potential foreign influence or threats to DISA and/or DoD supply chains.
• Risk assessment products shall be prepared in accordance with guidance from the DISA lead, in accordance with DISA ICT-SCRM Standard Operating Procedures (SOPs) and Concept of Operations (CONOPS).
• Gather requirements and develop ICT-SCRM RFIs.
• Support the implementation of DISA ICT-SCRM processes and policies
• Support periodic collection of ICT-SCRM internal process metrics in accordance with DISA's ICT-SCRM SOPs/CONOPS.
• Support the implementation of the DISA ICT-SCRM program strategy, ICT-SCRM training, ICT-SCRM procedures, and other support related to supply chain risk management.
• Project manage ICT-SCRM Threat Analysis Center (TAC) RFI queue (informal inquiries, quick turn reports, formal SCRM TAC RFIs).
• Maintain active lines of communication with SCRM Threat Analysis Center (SCRM-TAC) located at the Russell-Knox Building at the Marine Corps Base Quantico, Virginia and other SCRM analytic functions within DIA.

Basic Qualifications:

• Active TS/SCI security clearance prior to start
• Bachelor's Degree and 12+ years' experience; additional relevant experience may be substituted in lieu of degree.
• Extensive knowledge of DoD SCRM standards, including DoDI 5200.44, NIST 800-161
• Demonstrated ability to communicate with senior government customers and the ability to influence within multiple levels of the organization
• Host customer engagements to drive requirements and develop system security plans including, security concepts of operation, risk management matrix, security control traceability matrix, security test procedures, and plan of action and milestones
• Cybersecurity experience
• Project Management fundamentals
• Good oral and written skills

Preferred Qualifications:

• Master's degree in supply chain management, engineering, cybersecurity, or other technical discipline
• Project Management Experience or PMP certification.
• Experience with core Systems Engineering Disciplines (Requirements, Schedule, Risk, Readiness, System Closure, etc.)
• Certifications in Cybersecurity like CISSP or CASP are strongly preferred.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.