Senior Analyst - C-SCRM Specialist

Senior Analyst  - C-SCRM Specialist

We are seeking a skilled and experienced Senior Analyst to join our Cyber Supply Chain Risk Management team. Exiger Government Solutions’ senior cyber supply chain analyst position is a dynamic role that will support private and public sector in due diligence and cybersecurity analysis. The ideal candidate will be responsible for identifying, assessing, and mitigating risks associated in third-party supply chains from a cybersecurity perspective. The candidate must be passionate about research, analysis, and delivering timely and accurate assessments of third-party and supply chain risk management for clients.

Senior Analysts will utilize Exiger’s industry-leading Ion Channel SBOM and binary analysis software, and Exiger’s world-class supplier analytics to render deep insight on software products and logic-bearing devices. Senior Analysts will summarize these results in a narrative format, and will be a voice-of-the-customer to drive automation into the basic elements of report generation, and to enhance the breadth, depth and salience of our product platform and its exportable reports. This is an opportunity not only to build expertise in the cyber supply chain, but also to engage with technology development.

What You’ll Do:

• Prepare and present comprehensive software due diligence reports and product assurance playbooks to senior management and clients.
• Utilize Ion Channel binary analysis and Software Bill of Materials (SBOM) analysis to assess software products and their associated risks.
• Leverage Exiger’s DDIQ platform to conduct risk assessments of information technology and software suppliers, as well as their sub-suppliers.
• Produce clear, concise, and well-researched analyses for clients.
• Identify processes suitable for automation and use SQL to implement these solutions.
• Provide actionable recommendations for enhancing cyber supply chain security and resilience.
• Research, monitor, and analyze cybersecurity threats and vulnerabilities that could impact the supply chain.
• Stay informed on cyber trends, regulations, and emerging threats related to supply chain security.
• Collaborate with various Exiger teams, including Proactive Intelligence, Supply Chain, Software Supply Chain, and the Innovation Team on strategic projects.

What You’ll Need

• 2-4 years of relevant experience in the information technology industry.
• Strong understanding of cyber supply chain ecosystems (e.g., HBOMs, SBOMs), with the ability to map and analyze complex dependencies and associated risks.
• Experience with supply chain risk management practices and tools.
• Demonstrated interest in cybersecurity, information technology, and supply chain risk management.
• Ability to understand technical terminology and effectively communicate complex concepts to non-technical audiences (both written and verbal).
• Familiarity with cybersecurity frameworks (e.g., NIST, ISO 27001) and regulatory requirements.
• Excellent analytical and problem-solving skills, with a keen attention to detail
• Strong analytical and research skills
• Ability to deliver high quality work in a fast-paced environment
• Team player with high level of initiative and a proactive approach to work
• Ability to work effectively in a team as well as independently; takes ownership of tasks and follows up to ensure that they are successfully brought to completion
• Ability to utilize technology to solve problems, and openness to learn and level up as a cyber supply chain subject matter expert
• U.S. Citizenship required
• Willing and able to obtain a federal background check

We’re an amazing place to work. Why?

• Discretionary Time Off for all employees, with no maximum limits on time off
• Industry leading health, vision, and dental benefits
• Competitive compensation package
• 16 weeks of fully paid parental leave
• Flexible, hybrid approach to working from home and in the office where applicable
• Focus on wellness and employee health through stipends and dedicated wellness programming
• Purposeful career development programs with reimbursement provided for educational certifications

This is a remote eligible position within the United States, excluding residents of California, Colorado, and New York.

#LI-Remote