Cybersecurity Supply Chain Risk Analyst

9th Way Insignia

. Assess cybersecurity supply-chain risks associated with vendors, products, services, software, and third-party dependencies.

Posted 9/22/2026full-timeRemote • United StatesMid-LevelSenior💰 $98,135 - $125,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity supply-chain risk management, including vendor assessments, risk documentation, and stakeholder coordination. Proficient in applying NIST guidance and managing third-party security controls to mitigate risks effectively.

Highest-signal resume keywords

Cybersecurity Supply-Chain Risk ManagementVendor Security AssessmentsRisk DocumentationStakeholder EngagementNIST Guidance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecuritySupply-Chain RiskGRCSecurity AssessmentRisk AnalysisDocumentationRemediation ActionsThird-Party Security ControlsVulnerability NoticesSoftware Supply-Chain Risks

Soft Skills

Judgment Skills

Industry Keywords

CybersecurityInformation SystemsSupply-Chain ManagementEngineeringContinuous MonitoringEmerging ThreatsSecurity InvestigationClassified Information

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Assess cybersecurity supply-chain risks associated with vendors, products, services, software, and third-party dependencies.
Document supply-chain security requirements, risk findings, mitigations, and acceptance decisions.
Review supplier security evidence, software and hardware provenance information, vulnerability notices, and remediation plans.
Coordinate with acquisition, engineering, security, legal, and program stakeholders on third-party risk decisions.
Support continuous monitoring of supplier risks, emerging threats, and corrective-action status.

Requirements

What you’ll need

Bachelor's degree in cybersecurity, information systems, supply-chain management, business, engineering, or a related field, or equivalent relevant experience.
Five or more years of cybersecurity, third-party risk, supply-chain risk, GRC, security assessment, or related experience.
Experience conducting vendor or product security assessments and documenting risks, controls, and remediation actions.
Working knowledge of cybersecurity supply-chain risk management practices, NIST guidance, software supply-chain risks, and third-party security controls.
Strong risk-analysis, documentation, stakeholder-engagement, and judgment skills.
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
Voluntary Life Insurance
401(k)
Basic Life A&D
STD
LTD
PTO
Telehealth
Paid holidays
FSA
HSA
Employee Assistance Program (EAP)
Traveling Assistance