We are seeking an individual with in-depth knowledge and a subject matter expert (SME) in Supply Chain Risk Management (SCRM) for Information and Communications Technology (ICT), and related regulations and compliance requirements, responsible for ensuring that a company's supplier interactions adhere to all relevant legal and ethical standards, providing detailed guidance on best practices, identifying potential compliance risks within the supplier ecosystem, and advising on mitigation strategies to minimize disruptions and security threats.

This individual should have deep knowledge of SCRM controls in NIST SP 800-53 Rev 5, FedRAMP REV 5, specifically the SR family of controls and NIST SP 800-161 REV 1 Overlay controls and control enhancements for identifying and managing supply chain risks. The SME should have experience with developing a shared responsibility model and matrix that delineates control implementation responsibility between enterprise SCRM Program and various related stakeholders.

The Work

• Develop/update AFS enterprise SCRM policy, standards, procedures
• Develop and execute project compliance approach and periodic assessments of 500+ projects to meet enterprise SCRM requirements and standards including shared responsibility model for enterprise Tier 1 vs Project Tier 3 SCRM plans, controls, and inheritance
• Support AFS Project SCRM compliance
• Support Internal and External Audits related to SCRM controls
• Respond to SCRM RFIs and questionnaires in Solicitations and Contract Awards
• Respond to SCRM Contract clause mods
• Requirement trace to multiple impacting regulations and standards
• Ensure AFS complies with SCRM requirements in solicitations, contracts, and regulations
• Develop Checklists of Auditable Evidence needed to show compliance
• Support any 3PAO audits and new SCRM requirements for NIST SP 800-172, EO 14028, etc.
• Enable business outcomes by proactively identifying, and managing enterprise supply chain risks to AFS and Clients, across multiple domains, within established risk tolerances & priorities
• Execute on strategy, charter, roadmap, planning, and implementation of SCRM across the enterprise, including at project/program level, for AFS FedRAMP solutions and Assets, etc.
• Support stakeholders to self-assess and document compliance to SCRM requirements and standards

What you need

• Bachelor’s Degree
• 8 + years of relevant experience
• Experience with detailed analysis of requirements in NIST SP 800-161
• Ability to write policies, plans and standards
• U.S. Citizenship required
• Ability to obtain Security Clearance

Bonus if you have

• Bachelor’s Degree in Computer Science
• Top Secret Security Clearance