True Anomaly
Third-Party & Supply Chain Risk Analyst
$105K–$175K
Denver, CO +5 · Full-time · Posted Sep 24, 2026
- Location
- Denver, CO
Long Beach, CA
Washington, DC
Denver, CO
Long Beach, CA
Washington, DC - Experience
- 5+ years; a substantial portion focused on third-party or supply chain risk.
- Visa sponsorship
- Must be a U.S. citizen, lawful permanent resident, protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain required authorizations from the U.S. Department of State under ITAR.
About the job
Own day-to-day third-party vendor and cyber supply chain risk programs, assess suppliers and components, track remediation, and support enterprise risk reporting.
What you'll do
- Manage vendor assessments, monitoring, risk records, and remediation through the vendor lifecycle.
- Build and maintain hardware and software supply chain risk practices, inventories, and dependency analysis.
- Support enterprise risk quantification, registers, dashboards, audits, and cross-functional risk reporting.
What they ask for
- 5+ years of experience in third-party/vendor risk, supply chain risk, enterprise risk, GRC, cybersecurity risk, or a closely related discipline, with a substantial portion focused on third-party or supply chain risk.
- Hands-on experience executing vendor risk assessments, including questionnaires, documentation review, tiering, risk scoring, and remediation tracking.
- Working knowledge of NIST SP 800-161, NIST SP 800-53, NIST SP 800-171, DoD RMF (IL5/IL6), and CMMC, with direct experience supporting assessments or audits under one or more.
- Must be a U.S. citizen, lawful permanent resident, or protected individual per ITAR requirements; active or able to obtain SECRET, TS/SCI clearance.
Nice to have
- Background in startup, aerospace, defense technology, or SaaS companies operating in regulated government markets.
- Relevant certifications, cloud environment experience, or familiarity with DoD authorization documentation and export-control considerations.
Pay
Denver: $105,000 to $150,000 USD base salary; Long Beach: $115,000 to $160,000 USD base salary; Washington, DC: $115,000 to $160,000 USD base salary; SF Bay Area: $125,000 to $175,000 USD base salary
Tools
NIST SP 800-161, NIST SP 800-53, NIST SP 800-171, DoD RMF, CMMC, Jira, Confluence, MS Project
Model-written summary · the original posting is authoritative