Requirements:

• Provides analytical support to manage the increasing risk of supply chain compromise related to cybersecurity, whether intentional or unintentional.


• Identifies, assesses, and mitigates the risks associated with the distributed and interconnected nature of ICT/OT product and service supply chains.
• Ensures the integrity, security, quality and resilience of the supply chain and its products and services.
• Creates detailed technical vulnerability reports for ICT products and assigned technical “as a service” procurements.
• Produces management reporting, including appropriate metrics that inform senior leadership as to the state of information risk and exposure.
• Understands security product/service cost drivers and industry and business trends impacting the Agency information security program.
• Recognizes and identifies potential areas where existing security policies and procedures require ch...