Supply Chain Risk Management Lead — Mantua, VA at

About the Team

Everforth ECS is the federal segment of a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies. Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We value attracting and developing top talent and high-performing teams, while fostering a culture that is engaging, accountable, and mission-driven. Meet the challenge. Make a difference with Everforth ECS!

About the Role

This position supports the War Data Platform (WDP), a key initiative within the U.S. Department of War's AI-First strategy introduced in early 2026. The WDP focuses on operational warfighting data and aims to accelerate the deployment of artificial intelligence on the battlefield. Extending to Unclassified, Secret, and Top Secret environments, the platform supports collaboration between Combatant Commands, Joint Staff directorates, Senior Executive Service leaders, and operational analysts.

As the Supply Chain Risk Management (SCRM) Lead, you will serve as the senior enterprise authority for software and vendor supply chain risk governance across the WDP Core Integration program. You will direct the full lifecycle of third-party risk identification, assessment, mitigation, and reporting across NIPRNet, SIPRNet, and JWICS environments. Your work will integrate automated supply chain risk tooling, Software Bill of Materials governance, vendor security assessment programs, and threat intelligence monitoring to reduce WDP exposure to supply chain-based attacks. Ultimately, you will sustain authoritative, audit-ready risk transparency for Authorizing Officials, program leadership, and Government oversight personnel.

Note: This position is contingent upon contract award and is located in the National Capital Region, covering the Pentagon, Falls Church, and Fairfax.

Hiring Process

Please note that this role is contingent upon contract award. Interested candidates should submit their application through the official Everforth ECS channels. The selection process will evaluate technical expertise, security clearance eligibility, and alignment with our mission-driven culture.

Equal Opportunity

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis of any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, or local jurisdiction law.

Work location

Work model: On-site

9115, Santayana Drive, Mantua, Fairfax County, Virginia, 22031, United States

Mantua, Virginia

Key Responsibilities

check_circleLead enterprise Supply Chain Risk Management activities across unclassified and classified environments
check_circleDesign and execute supply chain risk governance frameworks for third-party vendors and software components
check_circleDirect vendor security assessments evaluating cybersecurity posture and compliance with federal requirements
check_circleOversee software supply chain reviews including component provenance analysis and Software Bill of Materials validation
check_circleCoordinate with contracting officers and acquisition teams to integrate security requirements into procurement actions
check_circleMaintain risk registers documenting third-party threats, mitigation strategies, and residual risk decisions
check_circleProvide advisory support to Authorizing Officials and program leadership on supply chain risk posture
check_circleMonitor threat intelligence and industry reporting to inform proactive mitigation actions

Requirements

verifiedCurrent Secret security clearance with ability to obtain Top Secret (TS) with Sensitive Compartmented Information (SCI)
verified15+ years of progressive experience in cybersecurity with specialization in Supply Chain Risk Management
verifiedActive DoW/DoD IAM Level I baseline certification (CompTIA Security+ CE, ISC² CAP, ISC² SSCP, or GIAC GSLC)
verifiedExperience designing enterprise SCRM governance frameworks for third-party software components
verifiedExperience creating and governing Software Bill of Materials documentation for 150+ systems
verifiedExperience coordinating SCRM activities with contracting and acquisition teams in compliance with DFARS 252.204-7020 and NIST SP 800-171
verifiedExperience supporting Risk Management Framework authorization activities using eMASS or Xacta

Nice to Have

Active Top Secret (TS) security clearance with Sensitive Compartmented Information (SCI) eligibility. Active Certified Information Systems Security Professional (CISSP) certification or equivalent advanced cybersecurity credential. Experience implementing automated Supply Chain Risk Management tooling within a DevSecOps delivery pipeline. Familiarity with the DoW transition from the seven-step Risk Management Framework to the five-phase Cybersecurity Risk Management Continuum. Experience supporting Zero Trust Architecture implementation as it relates to supply chain risk reduction. Background supporting SCRM governance for AI/ML platform programs.

Frequently asked questions about Supply Chain Risk Management Lead with Security Clearance at Episcopal Community Services of San Francisco

What does a Supply Chain Risk Management Lead with Security Clearance at Episcopal Community Services of San Francisco do?expand_more

A Supply Chain Risk Management Lead with Security Clearance at Episcopal Community Services of San Francisco is responsible for the following: Lead enterprise Supply Chain Risk Management activities across unclassified and classified environments; Design and execute supply chain risk governance frameworks for third-party vendors and software components; Direct vendor security assessments evaluating cybersecurity posture and compliance with federal requirements; and Oversee software supply chain reviews including component provenance analysis and Software Bill of Materials validation.

What are the requirements for this Supply Chain Risk Management Lead with Security Clearance role?expand_more

Episcopal Community Services of San Francisco is looking for candidates who meet the following requirements: Current Secret security clearance with ability to obtain Top Secret (TS) with Sensitive Compartmented Information (SCI); 15+ years of progressive experience in cybersecurity with specialization in Supply Chain Risk Management; Active DoW/DoD IAM Level I baseline certification (CompTIA Security+ CE, ISC² CAP, ISC² SSCP, or GIAC GSLC); Experience designing enterprise SCRM governance frameworks for third-party software components; Experience creating and governing Software Bill of Materials documentation for 150+ systems; and Experience coordinating SCRM activities with contracting and acquisition teams in compliance with DFARS 252.204-7020 and NIST SP 800-171.

Where is the Supply Chain Risk Management Lead with Security Clearance role at Episcopal Community Services of San Francisco located?expand_more

Supply Chain Risk Management Lead with Security Clearance at Episcopal Community Services of San Francisco is based in 9115, Santayana Drive, Mantua, Fairfax County, Virginia, 22031, United States. This is a on-site role.

Is this Supply Chain Risk Management Lead with Security Clearance job remote, hybrid, or on-site?expand_more

Episcopal Community Services of San Francisco has listed this Supply Chain Risk Management Lead with Security Clearance role as on-site.

How much experience is required for this Supply Chain Risk Management Lead with Security Clearance role?expand_more

Supply Chain Risk Management Lead with Security Clearance at Episcopal Community Services of San Francisco typically requires 15+ years of relevant experience at the lead level.

What skills do you need for the Supply Chain Risk Management Lead with Security Clearance role at Episcopal Community Services of San Francisco?expand_more

Key skills for Supply Chain Risk Management Lead with Security Clearance at Episcopal Community Services of San Francisco include Supply Chain Risk Management; Software Bill Of Materials; Risk Management Framework; Security Clearance; Top Secret; Sensitive Compartmented Information; Comp T Ia Security+ Ce; and Isc 2 SSCP.

What category does the Supply Chain Risk Management Lead with Security Clearance role belong to?expand_more

Supply Chain Risk Management Lead with Security Clearance at Episcopal Community Services of San Francisco is part of the it job category on Recrutus.

Supply Chain Risk Management Lead with Security Clearance