|
|
Careers At Navanti Group
DEVELOP YOUR CAREER
Navanti Group is a young company with significant growth potential, and we offer rapid advancement for those who excel. The success of our company lies in the quality of our people, which is why we will work hard to foster your talents and develop your career.
Do really interesting work
Work on innovative projects in international security, countering radicalization, new media, and business development.
Have a voice
We eschew traditional hierarchies because they stunt potential. We believe everyone has unique value to add regardless of age or title. We celebrate great ideas that can help our clients meet their objectives, and so we have institutionalized the practice of idea-sharing and development at all levels.
We honor drive and excellence
Our meritocratic system provides great rewards to those who excel and drive the business.
Be creative
We encourage fresh thinking because that's what drives innovation in our field.
Interested in applying for a position, but don't see one that fits right now? Submit your resume for future consideration here.
Navanti provides equal employment opportunities (EEO) to all employees and qualified applicants for employment without regard to race, color, religion, gender, gender identity, sexual orientation, ancestry, national or ethnic origin, age, marital status, handicap, disability, or status as a Veteran. We do not tolerate discrimination in any form and take measures to prevent discrimination against any employee or job applicant. We have a zero-tolerance policy for sexual harassment, exploitation, and/or abuse of power.
If you would like more information about your EEO rights as an applicant under US law, please click here. Cybersecurity Supply Chain Risk Management Subject Matter Expert (Anticipated Position)
| Department: |
Programs |
| Location: |
Arlington, VA
|
Location:
Remote / virtual support, aligned to Eastern Time core hours
Clearance Required:
Active Top Secret clearance with SCI eligibility
Position Summary:
The C-SCRM Subject Matter Expert will support GSA FAS/ASD in maturing its Cybersecurity Supply Chain Risk Management program from a compliance-focused model to a proactive, risk-informed enterprise capability. The SME will assess current C-SCRM practices, improve documentation and risk assessment processes, support strategy development, recommend scoring methodologies, develop practical C-SCRM guides, and advise stakeholders on cybersecurity, supplier risk, acquisition risk, and emerging technology considerations.
Key Responsibilities:
-
Lead assessment of current C-SCRM documentation practices and recommend standardized templates, naming conventions, version control practices, and collaboration processes
-
Review current vendor risk assessment processes covering supplier ownership, foreign influence, cybersecurity posture, product or service criticality, supply chain dependencies, and prohibited source risks
-
Develop recommendations for improving consistency, repeatability, accuracy, and usefulness of C-SCRM risk assessments
-
Review existing C-SCRM questionnaires and recommend improvements to question clarity, evidence collection, applicability, scoring, and risk-informed decision support
-
Develop or support development of a standardized C-SCRM Risk Assessment Framework
-
Support development of a C-SCRM Strategy and Implementation Plan, including priorities, governance approach, maturity objectives, roadmap, milestones, dependencies, and responsible parties
-
Assist with planning, coordination, tracking, and execution of C-SCRM projects
-
Develop C-SCRM guides, standard operating procedures, frameworks, briefings, and other written deliverables as requested
-
Support integration of C-SCRM into acquisition processes and stakeholder workflows
-
Provide expert analysis related to NIST SP 800-161, cybersecurity risk management, enterprise risk management, acquisition assurance, supplier risk, and emerging cybersecurity requirements
-
Support monthly status reporting, technical meetings, deliverable reviews, and Government stakeholder engagement
-
Work with minimal direction and produce executive-ready written products
Required Qualifications:
-
Minimum 3 years of experience establishing or supporting risk management programs, including C-SCRM
-
Demonstrated experience across the PWS task areas, including C-SCRM documentation, vendor risk assessment, questionnaire/scoring methodology, strategy development, and guide development
-
High-level cybersecurity or risk management certification, such as CISSP, CISM, or CRISC
-
Active Top Secret clearance with SCI eligibility
-
Strong knowledge of NIST SP 800-161, cybersecurity supply chain risk management, federal acquisition risk, and cyber risk frameworks
-
Strong written and oral communication skills
-
Ability to work independently with senior Government stakeholders
Preferred Qualifications:
-
Experience supporting GSA, DHS, DoD, IC, or other federal cybersecurity or acquisition programs
-
Experience with Section 889, FASCSA, supplier risk, foreign ownership/control/influence concerns, prohibited source analysis, or acquisition assurance
-
Experience developing federal SOPs, implementation plans, risk frameworks, scoring rubrics, stakeholder guides, and executive briefings
-
Familiarity with AI-enabled risk management, automation, post-quantum cryptography planning, continuous monitoring, and enterprise C-SCRM maturity models
Applicant Tracking System Powered by 
|