FCC - SCRM/Emerging Technology Security Analyst
cFocus Software seeks a SCRM/Emerging Technology Security Analyst to join our program supporting the Federal Communications Commission (FCC). This position is remote. This position requires the ability a Public Trust clearance.
Qualifications:
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field.
• 3–7+ years of experience in cybersecurity, risk management, or supply chain security.
• Experience supporting enterprise cybersecurity environments of similar scale and complexity.
• Knowledge of NIST frameworks (RMF, CSF), FISMA, and federal security standards.
• Experience with third-party risk management, vendor assessments, or SCRM programs.
• Familiarity with AI/ML security risks and emerging cybersecurity trends
• Strong analytical and risk assessment capabilities
• Knowledge of supply chain threats and mitigation strategies
• Understanding of AI/ML security risks and governance
• Experience with security documentation and reporting
• Excellent communication and stakeholder coordination skills
• Required Certifications
• At least one relevant cybersecurity certification such as:
• CISSP, CISM, or Security+
• Certified in Risk and Information Systems Control (CRISC)
• Certified Supply Chain Professional (CSCP) or equivalent (preferred)
• Additional role-based certifications related to cloud, AI security, or risk management are desirable..
Duties:
• Support Supply Chain Risk Management (SCRM) activities including analysis of third-party/vendor risks, documentation, and mitigation strategies.
• Assess risks associated with emerging technologies including AI, automation, and cloud-based services.
• Provide risk-informed recommendations for secure adoption of new technologies.
• Support development and maintenance of SCRM documentation, policies, and processes.
• Conduct security reviews of vendors, software, and emerging platforms.
• Analyze cybersecurity threats related to supply chain and emerging technologies.
• Collaborate with compliance, engineering, SOC/NOC, and risk teams.
• Support reporting activities including SCRM status reports, risk registers, and audit artifacts.
• Identify gaps in SCRM and emerging technology security practices and recommend improvements.
• Assist with governance and compliance activities aligned to NIST, FISMA, and federal cybersecurity frameworks.
Apply tot his job
Apply To this Job
Qualifications:
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field.
• 3–7+ years of experience in cybersecurity, risk management, or supply chain security.
• Experience supporting enterprise cybersecurity environments of similar scale and complexity.
• Knowledge of NIST frameworks (RMF, CSF), FISMA, and federal security standards.
• Experience with third-party risk management, vendor assessments, or SCRM programs.
• Familiarity with AI/ML security risks and emerging cybersecurity trends
• Strong analytical and risk assessment capabilities
• Knowledge of supply chain threats and mitigation strategies
• Understanding of AI/ML security risks and governance
• Experience with security documentation and reporting
• Excellent communication and stakeholder coordination skills
• Required Certifications
• At least one relevant cybersecurity certification such as:
• CISSP, CISM, or Security+
• Certified in Risk and Information Systems Control (CRISC)
• Certified Supply Chain Professional (CSCP) or equivalent (preferred)
• Additional role-based certifications related to cloud, AI security, or risk management are desirable..
Duties:
• Support Supply Chain Risk Management (SCRM) activities including analysis of third-party/vendor risks, documentation, and mitigation strategies.
• Assess risks associated with emerging technologies including AI, automation, and cloud-based services.
• Provide risk-informed recommendations for secure adoption of new technologies.
• Support development and maintenance of SCRM documentation, policies, and processes.
• Conduct security reviews of vendors, software, and emerging platforms.
• Analyze cybersecurity threats related to supply chain and emerging technologies.
• Collaborate with compliance, engineering, SOC/NOC, and risk teams.
• Support reporting activities including SCRM status reports, risk registers, and audit artifacts.
• Identify gaps in SCRM and emerging technology security practices and recommend improvements.
• Assist with governance and compliance activities aligned to NIST, FISMA, and federal cybersecurity frameworks.
Apply tot his job
Apply To this Job