Knowledge of CSCRM principles and practices, including NIST SP 800-161, NIST SP 800-171, DFARS cybersecurity requirements, supplier vetting, supply-chain mapping, software and hardware provenance, SBOM and HBOM review, vulnerability information, risk mitigation, and residual-risk tracking. You’ll review CSCRM reports and supporting documentation for completeness, consistency, and alignment with applicable DoD cybersecurity and supply-chain risk requirements, including supplier vetting, software and hardware provenance, SBOM/HBOM information, and documented risk mitigation actions.