Lead Cyber-Supply Chain Risk Management Specialist

Boeing

Lead Cyber-Supply Chain Risk Management Specialist at Boeing ensuring C-SCRM control frameworks align with regulatory requirements. Oversee audits and supplier risk management activities.

Posted 6/22/2026full-timeArlington • Arizona, Montana, Pennsylvania, Virginia, Washington • 🇺🇸 United StatesSenior💰 $130,900 - $189,750 per yearWebsite

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Maintain and evolve the enterprise C-SCRM control framework and requirements to ensure alignment with corporate risk strategy, regulatory requirements, and industry best practices (including emerging frameworks)
Lead control implementation verification and evidence collection for internal and external audits, assessments, and certification efforts (customer Request For Information (RFIs), supplier attestations, and third-party assessments)
Develop and maintain critical program governance documentation to operationalize the C-SCRM lifecycle across internal and external requirements
Coordinate with procurement, legal, engineering, compliance, security, and supply chain teams to operationalize C-SCRM controls across the supplier lifecycle
Support mapping and traceability of policies/controls to the organization’s control frameworks and to external standards and assessment frameworks
Prepare and present evidence packages and narratives for audit, certification, and customer-facing activities; own remediation tracking and closure
Participate in supplier risk assessments, continuous monitoring activities, and incident/issue management across the supplier ecosystem
Drive integration of C-SCRM controls into Governance, Risk, and Compliance (GRC) processes and platforms—especially issue management and remediation workflows
Provide subject-matter guidance on secure software supply chain practices (e.g., Software Bill of Materials ( SBOMs) and build/release controls) and supplier software assurance expectations

Requirements

What you’ll need

5+ years of experience working in risk management, governance, and regulatory requirements related to cybersecurity with a specific focus on business outcomes and service delivery
3+ years of experience with cybersecurity and regulatory frameworks including NIST 800-53, NIST 800-171, CMMC, ISO, GDPR, ITAR or similar frameworks
3+ years of experience with developing and managing governance and/or leading process improvement
3+ years of experience supporting internal and external audits, customer RFIs, certifications, and assessment programs; proven ability to prepare evidence packages and present to auditors/customers
1+ years of experience with Governance, Risk and Compliance (GRC), Information Technology (IT) Audit, Information Security, Vulnerability Management, and Compliance

Benefits

Comp & perks

health insurance
flexible spending accounts
health savings accounts
retirement savings plans
life and disability insurance programs
paid and unpaid time away from work

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

risk managementcybersecuritygovernanceregulatory requirementsprocess improvementinternal auditsexternal auditsevidence preparationVulnerability ManagementCompliance

Soft Skills

leadershipcommunicationorganizationalcollaborationpresentation

Certifications

NIST 800-53NIST 800-171CMMCISOGDPRITAR