Supply Chain Risk Management Consultant

Knowledge of Cyber Supply Chain Risk Management including NIST 800-161 Preferred Skills: Knowledge of SBOMs and Cyber Supply Chain Risk Management workflows Day-to-day Responsibilities: "• Support the development of a RACI matrix to assist the agency in clearly defining agency-wide roles and responsibilities for C-SCRM, including integration with key stakeholder groups (e.g., acquisition, enterprise risk management, cybersecurity risk management). • Support the integration of C-SCRM processes and controls into the agency's risk management framework (RMF) process, including common control provider (CCP) documentation, and broader integration into vulnerability management activities.

• Job Title: Supply Chain Risk Management Consultant
• Location: Baltimore, MD
• Tax Term (W2, C2C): W2
• Job Type (Permanent/Contract) : Contract
• Duration: 1+ year
• Pay Range: $65 - $70/hr on W2

Description:
Knowledge of Cyber Supply Chain Risk Management including NIST 800-161 Preferred Skills: Knowledge of SBOMs and Cyber Supply Chain Risk Management workflows Day-to-day Responsibilities: "• Support the development of a RACI matrix to assist the agency in clearly defining agency-wide roles and responsibilities for C-SCRM, including integration with key stakeholder groups (e.g., acquisition, enterprise risk management, cybersecurity risk management). • Support the development of a C-SCRM training program plan, including, defining subject matter, cadence, format, and target audiences. • Assist in the development of a Software Bill of Materials (SBOM) Strategy to guide the implementation of an agency-wide solution to secure the software supply chain. • Assist in the development of C-SCRM key performance indicators (KPIs) and key risk indicators (KRIs) to guide the agency's cybersecurity supply chain risk assessment (C-SCRA) process and continuous monitoring activities. • Support the integration of C-SCRM processes and controls into the agency's risk management framework (RMF) process, including common control provider (CCP) documentation, and broader integration into vulnerability management activities. • Assist in the development of a C-SCRM risk register and support the ongoing maturity and revision of the agency's C-SCRM strategy, policy, and business process documentation." Education: Bachelors Degree.