Third Party Risk Manager Jobs in Hanover, MD (NOW HIRING)

Leidos is seeking a Senior Supply Chain Risk Management Threat Intelligence Lead Analyst to provide advanced, high-level technical and analytical support to the FAA's Counterintelligence (CI) Supply Chain Risk Management (SCRM) program. The program is responsible for identifying, assessing, and mitigating foreign intelligence, nation-state, and cybersecurity threats to the FAA's supply chain, critical infrastructure, and enterprise networks. Embedded as a senior leader within a 4-person team, this position focuses on threat landscapes, adversarial intent, and geopolitical vulnerability modeling. Providing independent, authoritative all-source intelligence analysis, the senior analyst designs analytic methodologies using Open Source Intelligence (OSINT) and corporate registries to uncover hidden Foreign Ownership, Control, or Influence (FOCI), technology transfer risks, and strategic threat trends targeting the aviation industrial base. This role oversees the evaluation of physical, technical, and personnel vulnerabilities, including sophisticated hardware/firmware threats and insider risks, to produce exquisite intelligence briefings that guide FAA executive leadership and empower the broader SCRM framework.

Primary Responsibilities:

• Act as lead analyst ensuring strict quality control, mentoring, and analytical integrity across all FAA CI SCRM products.
• Conduct proactive threat analysis of foreign suppliers, third-party software developers, and hardware manufacturers to identify nation-state activity and strategic threat trends targeting the FAA.
• Utilize OSINT and corporate registries to screen prospective FAA vendors and evaluate the supply chain for Foreign Ownership, Control, or Influence (FOCI) indicators, foreign partnerships, and technology transfer threats.
• Monitor specialized threat feeds, nation-state activities, and geopolitical shifts to identify, evaluate, and mitigate strategic supply chain risks to the FAA.
• Support the FAA Insider Risk Program by identifying and analyzing personnel concerns, anomalous vendor behaviors, and internal vulnerabilities.
• Evaluate threat vectors including malicious hardware or software modifications, supply chain transit interdiction, and counterfeit electronic components.
• Synthesize complex data to produce clear, actionable Supplier Threat Profiles, Country Risk Profiles, link-analysis diagrams, and timely threat alerts/advisories for FAA program managers, technical teams, and executive decision-makers.
• Translate highly complex counterintelligence findings, technical hardware/software vulnerabilities, and macroeconomic geopolitical risks into exquisite intelligence briefings, dashboards, and executive decision packages tailored specifically for senior FAA leadership.
• Formulate performance metrics and program reports for executive leadership.
• Maintain critical operational and collaborative relationships with external stakeholders, including the FAA Chief Information Officer (CIO), Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Department of Homeland Security (DHS), and the broader Intelligence Community (IC).
• Coordinate and facilitate SCRM training and awareness campaigns for acquisition personnel and program offices.

Basic Qualifications:

• Citizenship: U.S. Citizenship required.
• Clearance: Active Top Secret/SCI clearance is required.
• Education: Bachelor's or Master's degree in Supply Chain, Intelligence Studies, National Security, Logistics, Data Science, Cybersecurity, Information Technology, Computer Science, Computer Engineering, or a related technical discipline. (Equivalent professional experience or specialized military/federal training may be substituted).
• Experience: 12+ years of professional experience as an Intelligence Analyst (All-Source, Cyber, Counterintelligence, or Open-Source Intelligence) or senior-level experience in third-party risk management (TPRM), Cyber Supply Chain Risk Management (C-SCRM), technical risk assessments, IT auditing, cybersecurity risk management, or infrastructure defense in a federal or highly regulated commercial environment.
• Analytical Capability: Proven experience using corporate registries, commercial databases, and OSINT techniques to analyze corporate structures, trace components, and evaluate FOCI.
• Technical Skills: Proficiency with due diligence or corporate intelligence platforms (e.g., Sayari, Altana, Interos, Maltego) and/or data modeling.
• Communication Skills: Exceptional written and verbal communication skills, with a proven track record of translating complex intelligence and technical risk data into clear, concise executive briefs and formal written reports for non-technical stakeholders and delivering briefing materials to C-suite or flag-level leadership.

Preferred Qualifications:

• Completion of formal military or federal intelligence training courses focusing on threat network analysis or open-source collection.
• High proficiency with advanced OSINT search techniques, corporate filing retrieval systems, and international trade/shipping databases.
• Familiarity with the acquisition frameworks and an understanding of how supply chain intelligence feeds into federal procurement lifecycles.
• Prior experience supporting threat intelligence or counterintelligence infrastructure defense missions specifically for critical infrastructure or a federal agency.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.