9th Way Insignia Logo

9th Way Insignia

Cybersecurity Supply Chain Risk Analyst

Posted 7 Days Ago
Remote
Hiring Remotely in United States
98K-125K Annually
Senior level
Remote
Hiring Remotely in United States
98K-125K Annually
Senior level
Assess cybersecurity supply-chain risks involving vendors, products, software, services, and third-party dependencies. Document security requirements, findings, mitigations, and risk decisions; review supplier evidence, provenance, vulnerabilities, and remediation plans; coordinate with acquisition, engineering, legal, security, and program stakeholders; and continuously monitor supplier risks, threats, and corrective actions.
The summary above was generated by AI

9th Way Insignia is a service-disabled, veteran-owned small business bringing transformative technology to our government customers so they can achieve their missions.  Our specialties include cybersecurity, cloud modernization, software development, data analytics, enterprise architecture, enterprise IT, analytics, process automation, and artificial intelligence.  Learn more about 9th Way Insignia at https://9thwayinsignia.com/.

Application password: Niner

Project Introduction

The Department of Veterans Affairs Cybersecurity Operations and Services Enterprise (COSE) program delivers the enterprise cybersecurity operations, engineering, architecture, risk, and compliance support that safeguards VA systems, data, and mission delivery. The team helps strengthen the cyber resilience of the digital services relied on by Veterans, their families, and the VA workforce.

9th Way Insignia is seeking a Cybersecurity Supply Chain Risk Analyst to support this program. This position is contingent upon contract award.

Professional Level

E3 – Engineer

Responsibilities
  • Assess cybersecurity supply-chain risks associated with vendors, products, services, software, and third-party dependencies.
  • Document supply-chain security requirements, risk findings, mitigations, and acceptance decisions.
  • Review supplier security evidence, software and hardware provenance information, vulnerability notices, and remediation plans.
  • Coordinate with acquisition, engineering, security, legal, and program stakeholders on third-party risk decisions.
  • Support continuous monitoring of supplier risks, emerging threats, and corrective-action status.
Requirements
  • Bachelor's degree in cybersecurity, information systems, supply-chain management, business, engineering, or a related field, or equivalent relevant experience.
  • Five or more years of cybersecurity, third-party risk, supply-chain risk, GRC, security assessment, or related experience.
  • Experience conducting vendor or product security assessments and documenting risks, controls, and remediation actions.
  • Working knowledge of cybersecurity supply-chain risk management practices, NIST guidance, software supply-chain risks, and third-party security controls.
  • Strong risk-analysis, documentation, stakeholder-engagement, and judgment skills.
Salary Range
$98,135—$125,000 USD

9th Way Insignia’s range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Clearance/Background Investigation
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

Benefits
Eligible employees will have access to our comprehensive benefits package which includes Medical, Dental, Vision, Voluntary Life Insurance, 401(k), Basic Life A&D, STD, LTD, PTO, Telehealth, paid holidays, FSA, HSA. Additional resources include our Employee Assistance Program (EAP) and Traveling Assistance.

Legal
We’re an equal employment opportunity employer that empowers our people to fearlessly drive change – no matter their race, color, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, age, marital status, sexual orientation, gender identity, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, or local law.

Equal Employment Opportunity Notice
Applicants have the right to be free from unlawful workplace discrimination. Please review the EEOC’s Know Your Rights: Workplace Discrimination is Illegal notice. Accessible formats and translations are also available from the EEOC.
Application Accommodations
If you require a reasonable accommodation to complete this application or participate in the hiring process, please contact [email protected]. Requests will be considered individually.

Similar Jobs

53 Minutes Ago
Remote or Hybrid
192K-300K Annually
Expert/Leader
192K-300K Annually
Expert/Leader
Artificial Intelligence • Cloud • HR Tech • Information Technology • Productivity • Software • Automation
Chief of Staff to the GVP of Moveworks Sales, owning sales strategy, operating metrics, specialist productivity, sales plays, forecasting cadence, cross-functional alignment, and executive narratives. The role drives Employee Experience revenue performance, accelerates specialist ramp, coordinates Product, Marketing, Enablement, and Customer Success dependencies, and provides data-backed recommendations to senior leaders and board forums. It is remote within a major U.S. metro with approximately monthly travel.
Top Skills: AI
55 Minutes Ago
Remote or Hybrid
172K-301K Annually
Senior level
172K-301K Annually
Senior level
Artificial Intelligence • Cloud • HR Tech • Information Technology • Productivity • Software • Automation
Architect, develop, optimize, and maintain AI-enhanced access security features and backend services. Integrate LLMs and AI workflows for identity intelligence, risk detection, and remediation. Lead architecture, design, testing, performance, reliability, and production readiness for enterprise systems. Deliver features end to end, collaborate cross-functionally, conduct code reviews, and mentor engineers while improving scalability, maintainability, and security.
Top Skills: AnthropicAWSAzureCi/CdDockerGCPGoGoogle AiGraphQLGrpcIdentity And Access ManagementIdentity Governance And AdministrationJavaKubernetesLlm FrameworksNeo4JOpenaiPostgresPrivileged Access ManagementPythonRestSQL
55 Minutes Ago
Easy Apply
Remote
United States
Easy Apply
148K-190K Annually
Senior level
148K-190K Annually
Senior level
Edtech • Social Impact
Own end-to-end product experience design for CodePath’s learning platform, including user flows, information architecture, interaction design, and design systems. Conduct user discovery, create engineer-ready wireframes and specifications, partner with product managers and engineers, direct a UI design contractor, and maintain experience quality. The role focuses on platform areas, learner-facing tools, internal tools, and AI-powered education experiences.
Top Skills: CSSFigmaHTMLTailwind

What you need to know about the San Francisco Tech Scene

San Francisco and the surrounding Bay Area attracts more startup funding than any other region in the world. Home to Stanford University and UC Berkeley, leading VC firms and several of the world’s most valuable companies, the Bay Area is the place to go for anyone looking to make it big in the tech industry. That said, San Francisco has a lot to offer beyond technology thanks to a thriving art and music scene, excellent food and a short drive to several of the country’s most beautiful recreational areas.

Key Facts About San Francisco Tech

  • Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Google, Apple, Salesforce, Meta
  • Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
  • Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
  • Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
  • Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account