Government & Public Sector Cybersecurity Supply Chain Risk Management Manager

From strategy to the Government & Public Sector practice of Ernst & Young provides a full range of consulting and audit services to help our Federal State Local and Education clients implement new ideas to help achieve their mission outcomes. We deliver real change and measurable results through our diverse highperforming teams quality work at the highest professional standards operational knowhow from across our global organization and creative and bold ideas that drive innovation. We enable our government clients to achieve their mission of protecting the nation and serving the people; increasing public safety; improving healthcare for our military veterans and citizens; delivering essential public services; and helping those in need. EY is ready to help our government build a better working world.

The Opportunity

We are seeking a Cybersecurity Supply Chain Risk Management (CSCRM) Manager who could oversee teams in the implementation development maintenance and enhancement of CSCRM solution(s). This role will be responsible for managing crossfunctional teams optimizing processes and leveraging technology to enable the assessment evaluation and identification of CSCRM risks within suppliers products services and software. The ideal candidate will have a strong background in CSCRM product management cybersecurity and risk management.

Your Key Responsibilities

• Lead a CSCRM team focused on implementing / managing a CSCRM solution aligned with organizational goals and regulatory requirements.
• Oversee the development and implementation of CSCRM processes and technologies ensuring they are efficient effective and scalable.
• Develop and implement CSCRM policies procedures and frameworks in alignment with industry standards and regulatory requirements.
• Manage a crossfunctional team including cybersecurity analysts business analyst and technology specialists to deliver highquality CSCRM services.
• Collaborate with stakeholders to define product vision roadmap and key performance indicators (KPIs) for the CSCRM solution.
• Drive ongoing enhancements to the CSCRM solution leveraging feedback from users and stakeholders to improve functionality and user experience.
• Maintain and effectively operate a CSCRM solution including but not limited to regular program updates audit response support and compliance checks.
• Stay informed about industry trends emerging threats and best practices in CSCRM and cybersecurity to inform product strategy.
• Prepare and present reports on the CSCRM solutions performance risks and opportunities to senior management and other stakeholders.
• Support Business Development and Practice Development initiatives to expand and advance EYs CSCRM services and capabilities throughout the Government & Public Sector.

Skills and attributes for Success

• Experience with CSCRM frameworks standards and regulations such as NIST 800161 NIST 80053 NIST 800218 NDAA 889 FISMA and other related cybersecurity laws and regulations
• Proven experience in managing crossfunctional teams and driving process improvements.
• Excellent analytical strategic thinking and communication skills.
• Familiarity overseeing the maintenance operations and enhancements of technology solutions used in CSCRM (e.g. risk assessment tools GRC technologies and data solutions).
• Familiarity with multiple risk lenses utilized to support CSCRM evaluations such as cybersecurity and foreign interest.

To qualify for the role you must have

• Bachelors degree in a related field
• A minimum of 5 years of related work experience
• Must be able to obtain and maintain a Secretlevel clearance or higher
• CISSP CISM CISA CRISC CGRC or other relevant certification
• Must be comfortable working in the greater Washington DC area inperson as needed

Due to the nature of our work in the Government and Public Sector work may be required to be completed at client EY and/or contractor sites. Our goal is to assign professionals to projects within a commutable distance of their work location office. In certain circumstances travel may be required beyond your work location based on client and project needs. Candidates should be willing to travel 20 30 or more.

What we look for

We are looking for people who strive to lead themselves their teams and their communities people who can foster effective team work to drive results. We are interested in authentic communicators with the ability to collaborate with EY colleagues across various teams who want to develop personally and professionally in a dynamic organization.

• Continuous learning: Youll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: Well provide the tools and flexibility so you can make a meaningful impact your way.
• Transformative leadership: Well give you the insights coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: Youll be embraced for who you are and empowered to use your voice to help others find theirs.