Supply Chain Risk Management, Audit Analyst – Logistics Management Analyst 2

Mission Technologies, a division of HII

Intermediate-level Supply Chain Risk Management Audit Analyst supporting DoD data platforms at HII. Conducting vendor security assessments and coordinating remediation planning within supply chain risk management.

Posted 4/22/2026full-timeFairfax • Virginia • 🇺🇸 United StatesMid-LevelSenior💰 $62,644 - $89,491 per yearWebsite

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Performs detailed supply chain security review activities supporting Department of Defense information systems across unclassified and classified environments.
Conducts structured analysis of third-party vendor security documentation, evaluating cybersecurity controls, governance practices, and risk management approaches against DoD and federal requirements.
Reviews independent audit artifacts including SOC reports, ISO certifications, penetration test summaries, and vendor attestations to assess adequacy of security safeguards and control implementation.
Validates vendor responses to security questionnaires, due diligence requests, and contractual security clauses, identifying gaps, inconsistencies, and residual risk conditions.
Coordinates with Supply Chain Risk Management leadership, contracting personnel, system owners, and cybersecurity teams to document findings and support remediation planning.
Tracks vendor security deficiencies, corrective actions, and closure status within risk registers, assessment repositories, and continuous monitoring dashboards.
Prepares assessment summaries, deficiency reports, and supporting documentation for Risk Management Framework activities, authorization decisions, and leadership briefings.
Maintains organized evidence packages within SharePoint and approved document management systems to support audits and inspections.
Monitors emerging supply chain threats, government advisories, and policy updates to inform assessment criteria and review focus areas.
Contributes to improved third-party risk visibility, stronger vendor accountability, and sustained mission assurance while reinforcing program values of diligence, transparency, consistency, and disciplined risk oversight.

Requirements

What you’ll need

3 years relevant experience with Bachelors in related field; 1 year relevant experience with Masters in related field; or High School Diploma or equivalent and 7 years relevant experience.
IAM I (CompTIA Security+ CE, ISC² CAP, ISC² SSCP, or GIAC GSLC) certified
Must have an active Secret security clearance
US Citizenship
Familiarity with Advana architecture, Palantir Foundry, or similar data integration platforms (Preferred)
Experience with data governance frameworks and metadata management (Preferred)
Agile/SAFe delivery experience in secure environments (Preferred)

Benefits

Comp & perks

best-in-class medical, dental and vision plan choices
wellness resources
employee assistance programs
Savings Plan Options (401(k))
financial planning tools
life insurance
employee discounts
paid holidays
paid time off
tuition reimbursement
early childhood and post-secondary education scholarships

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

supply chain securitycybersecurity controlsrisk managementaudit artifactssecurity questionnairesdeficiency reportsassessment summariesdata governance frameworksmetadata managementAgile

Soft Skills

communicationorganizationalcollaborationattention to detailproblem-solvinganalytical thinkingleadershiptransparencydiligenceaccountability

Certifications

IAM ICompTIA Security+ CEISC² CAPISC² SSCPGIAC GSLC