ApplyDescription
K2United is an organization housing two distinct, national, customer-facing brands tied together by a shared purpose to create solutions so those we serve thrive. Through our brands, K2Share and CareerSafe, we provide advisory services in cyber risk management and online education for workforce readiness. K2Share is an experienced cybersecurity firm with over 24 years of government consultingand advisory services to numerous federal agencies. We offer a comprehensive set of services and solutions designed to strengthen the cybersecurity of our federal clients’ networks, systems, and data, including:
- Innovative cybersecurity training and workforce development support to meet the ever-changing cyber environment and current threats.
- Cybersecurity strategy, policy, and governance support at the C-suite level.
- Business intelligence, analysis, and data visualization through advanced real-time dashboarding, including our proprietary Cybersecurity Framework (CSF) Risk Scorecard.
K2Share is seeking an experienced Supply Chain Risk Management to support the operation and execution of enterprise-level penetration testing initiatives. This position is a contingent contract position upon K2Share securing an upcoming contract.
About You:
You have experience with comprehensive SCRM assessments, managing policies, and enjoy being the one to report on KPIs. In addition, you can align others on assessment results through written and verbal communication. You excel at:
- Conducting rapid and deep-dive assessments for all department systems and presenting the results to stakeholders for alignment.
- Performing and creating scorecards for high-value asset (HVA) supply chain risk management (SCRM) assessments.
- Updating enterprise SCRM strategic plans, policies, standards, and supplier management SOPs, while following Federal Information Security Management Act (FISMA) compliance.
- Conducting counterfeit detection within SCRM assessments and updating related reports and SOPs.
- Reporting on key performance indicators (KPIs) for the department's software bill of materials (SBOM) strategy implementation.
Requirements
- Must have at least 5 years of experience conducting ICT SCRM assessments within the Federal enterprise.
- Have 3+ years of NIST Cybersecurity, NIST Cybersecurity SCRM, and SCRM FISMA experience.
- Have 2 years of experience executing SCRM strategy, governance, methodology, and procedures.
- Must possess a Bachelor’s degree in Information Systems Management, Computer Networks and Cybersecurity, Computer Science, or something equivalent.
- Must possess a ERAI Interception Certification
- Must additionally possess one of the following Professional Certifications: ISC2 Certified Information System Security Professional (CISSP), ISACA Certified Information System Auditor (CISA), GIAC Systems and Network Auditor (GSNA), or CISM.
- Ability to obtain and maintain a U.S. Public Trust clearance
Who is K2United?
At its core, K2United is a group of unique people coming together to do the remarkable. We believe in creating a workplace where sincerity and open communication are the norm. We value respect, encourage innovation, and believe wholeheartedly in the value of collaboration and a little nerdy camaraderie. Our talented teams have provided cybersecurity advisory services to federal agencies for over 20 years, and we also develop industry-recognized online education through our CareerSafe brand. We think we’re a pretty fantastic company to work for, but you don’t have to take our word for it: K2United is a certified Great Place to Work® and has been named one of the Best Small Workplaces™ in the U.S.
Benefits:
We’re invested in the people who make our success possible. As a K2United employee, you’ll enjoy a comprehensive set of benefits and opportunities that meet you where you are. These benefits include:
- 401(k) plan with employer matching contributions
- Low-cost, comprehensive medical benefits for employees and their families
- Flexibility for those needing time off for jury duty, voting, military leave, etc.
- Wellness stipend program (includes fitness reimbursement program)
- Casual dress work environment
- Technical training and certifications as required
- Any of our CareerSafe Online training courses for free to employees and immediate family.
Applicants must be willing to take a drug test and submit to a credit and background investigation as part of the selection process.
The U.S. government restricts access by Foreign Nationals to certain types of technology and technical data. Consequently, this posting is intended only for U.S. citizens. K2United, LLC is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, or protected Veteran status. This job description is not an exhaustive list of job responsibilities.
K2United management reserves the right to change or alter this job description at any time without notice.
