FCC - SCRM/Emerging Technology Security Analyst

cFocus Software Incorporated

Washington, DC(remote)

JOB DETAILS
JOB TYPE
Full-time
SKILLS
Analysis Skills, Artificial Intelligence (AI), Automation, CISM - Certified Information Security Manager, CISSP - Certified Information Systems Security Professional, Certified Supply Chain Professional (CSCP), Cloud Computing, Communication Skills, CompTIA Security+, Computer Science, Documentation, Emerging Technology, FCC (Federal Communications Commission), FISMA - Federal Information Security Management Act, Information Technology & Information Systems, Internet Security, Network Operations Center, Organizational Skills, Risk, Risk Analysis, Risk Management, Security Analysis, Status Reports, Supply Chain, Supply Chain Management, Technology Analysis, Trend Analysis, U.S. National Institute of Standards and Technology (NIST)
LOCATION
Washington, DC
POSTED
7 days ago
cFocus Software seeks a SCRM/Emerging Technology Security Analyst to join our program supporting the Federal Communications Commission (FCC). This position is remote. This position requires the ability a Public Trust clearance.
Qualifications:
  • Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field.
  • 3–7+ years of experience in cybersecurity, risk management, or supply chain security.
  • Experience supporting enterprise cybersecurity environments of similar scale and complexity.
  • Knowledge of NIST frameworks (RMF, CSF), FISMA, and federal security standards.
  • Experience with third-party risk management, vendor assessments, or SCRM programs.
  • Familiarity with AI/ML security risks and emerging cybersecurity trends
  • Strong analytical and risk assessment capabilities
  • Knowledge of supply chain threats and mitigation strategies
  • Understanding of AI/ML security risks and governance
  • Experience with security documentation and reporting
  • Excellent communication and stakeholder coordination skills
  • Required Certifications
    • At least one relevant cybersecurity certification such as:
    • CISSP, CISM, or Security+
    • Certified in Risk and Information Systems Control (CRISC)
    • Certified Supply Chain Professional (CSCP) or equivalent (preferred)
    • Additional role-based certifications related to cloud, AI security, or risk management are desirable..
       
Duties:
  • Support Supply Chain Risk Management (SCRM) activities including analysis of third-party/vendor risks, documentation, and mitigation strategies.
  • Assess risks associated with emerging technologies including AI, automation, and cloud-based services.
  • Provide risk-informed recommendations for secure adoption of new technologies.
  • Support development and maintenance of SCRM documentation, policies, and processes.
  • Conduct security reviews of vendors, software, and emerging platforms.
  • Analyze cybersecurity threats related to supply chain and emerging technologies.
  • Collaborate with compliance, engineering, SOC/NOC, and risk teams.
  • Support reporting activities including SCRM status reports, risk registers, and audit artifacts.
  • Identify gaps in SCRM and emerging technology security practices and recommend improvements.
  • Assist with governance and compliance activities aligned to NIST, FISMA, and federal cybersecurity frameworks.

Powered by JazzHR

About the Company

c

cFocus Software Incorporated