Apply on Employer Site

REI Systems · 1 day ago

Senior Advisor – Cybersecurity Supply Chain Risk Management Advisor

Sterling, VA

Full-time

Onsite

Senior Level, Lead/Staff

8+ years exp

REI Systems is a technology solutions provider focused on advancing federal missions and improving lives through innovative services. They are seeking a Senior Advisor to guide federal agencies in implementing Cybersecurity Supply Chain Risk Management policies and practices, translating complex requirements into actionable guidance while promoting consistency and measurable risk reduction across the federal ecosystem.

Cloud ComputingDevOpsEnterprise SoftwareOpen SourceSoftware

Responsibilities

Guide federal agencies in interpreting and implementing Cybersecurity Supply Chain Risk Management (C-SCRM) policies, mandates, and best practices across acquisition, security, and program lifecycles

Translate evolving cybersecurity and supply chain requirements into clear, actionable guidance for federal practitioners

Lead and support the development of governmentwide playbooks, templates, implementation guides, maturity models, and strategic communications

Design and deliver structured stakeholder outreach and education programs such as workshops, training sessions, webinars, and learning content

Facilitate cross-agency working groups and communities of practice, engaging with industry partners, standards organizations, and mission stakeholders

Provide expert input into federal procurement practices to strengthen C-SCRM throughout market research, requirements development, solicitation language, source selection, and vendor oversight

Analyze trends, risks, and implementation gaps and synthesize findings into executive-level briefings and recommendations for senior leadership

Support continuous improvement through feedback mechanisms, adoption and maturity metrics, and future capability planning

Promote consistency, clarity, and measurable risk reduction across the federal ecosystem while minimizing unnecessary burden on agencies and vendors

Qualification

Federal cybersecurity knowledgeSupply chain risk managementNIST frameworksTraining program developmentStakeholder engagement strategiesVendor lifecycle processesAnalytical skillsInteragency collaborationProfessional certificationsCommunication skillsFacilitation skills

Required

Advanced knowledge of federal cybersecurity and supply chain risk management requirements, including NIST frameworks, FAR/DFARS provisions, and emerging government-wide C-SCRM mandates

Demonstrated ability to translate complex policy and technical concepts into clear, accessible guidance suitable for acquisition professionals, program managers, and industry partners

Proven experience designing and delivering structured outreach, training, and education programs, including the development of curricula, communication materials, and stakeholder engagement strategies

Capability to support the launch and maturation of new C-SCRM initiatives, assisting in the rollout of program frameworks, guidance documents, awareness campaigns, and continuous improvement activities

Strong analytical, communication, and facilitation skills to ensure consistent understanding, adoption, and compliance across agencies and contractors

Minimum 8–10 years of experience in federal cybersecurity, ICT risk management, supply chain assurance, or related enterprise-level program implementation

Familiarity with federal acquisition and vendor lifecycle processes, including market research, requirements development, solicitation evaluation, contractor oversight, and performance monitoring

Experience working with senior federal leadership, councils, or interagency working groups, with a proven ability to develop consensus and build coalitions across diverse stakeholder groups

Preferred

10–15 years of experience supporting enterprise or governmentwide cybersecurity or supply chain risk initiatives

Experience applying or supporting federal C-SCRM-relevant policies and strategies (e.g., EO 14028, National Cyber Strategy, OMB guidance, FASC, TIC 3.0, Zero Trust strategies, SBOM/secure-by-design initiatives)

Experience developing maturity models, dashboards, risk scoring methods, or performance frameworks

Prior work with federal shared services, category management organizations, centers of excellence, or communities of practice

Demonstrated success bridging policy and technical domains across CIO, CISO, CAO, program, and mission offices

Industry, standards-body, or critical infrastructure engagement experience

Professional certifications (preferred, not required): CISSP, CISM, CCSP, CEH, PMP, CIPP/US, or other relevant credentials