Project Manager II – Supply Chain Risk Management

In This Job, You Will

• Conduct supplier, vendor, component, part, and supply-chain research to identify potential SCRM and Program Protection risks and vulnerabilities.
• Develop and support Vendor Health Assessments (VHAs) and other supplier, vendor, component, and part-level risk assessments using available commercial, government, program, and other approved information sources.
• Analyze potential risks involving foreign ownership, control or influence; foreign sourcing; geographic concentration; critical and strategic materials; critical minerals; single/sole-source suppliers; financial or operational instability; cybersecurity; counterfeit concerns; obsolescence/DMSMS; manufacturing dependencies; long lead times; and other supply-chain vulnerabilities.
• Evaluate available sustainment and supply data, including stock on hand, consumption history, lead times, sourcing limitations, supplier availability, procurement history, and supplier dependencies to help determine potential operational and sustainment impacts.
• Research geopolitical events, supplier disruptions, cyber incidents, natural disasters, regulatory or trade changes, material shortages, manufacturing disruptions, and other emerging issues to determine whether they could affect MMIII suppliers, materials, components, or sustainment activities.
• Support critical material and critical mineral assessments, including identifying dependencies on foreign sources, countries of concern, concentrated global production or processing, and vulnerable lower-tier suppliers.
• Support Program Protection reviews for new or modified components, suppliers, technical changes, contracts, task efforts, and other program activities to help determine applicable protection requirements.
• Assist in the development, review, and maintenance of applicable Program Protection and SCRM documentation, including Program Protection Plans (PPPs), SCRM plans, Program Protection Implementation Plans (PPIPs), Program Protection Assessments (PPAs), Memorandums for Record (MFRs), risk assessments, and related program artifacts, as applicable to the effort.
• Work with Program Protection, cybersecurity, engineering, intelligence, logistics, contracting, DMSMS, SAM, supplier management, program offices, and other subject matter experts to determine whether identified concerns require additional analysis, protection measures, mitigation, monitoring, or escalation.
• Develop clear and supportable risk statements describing the identified condition or threat, cause, potential consequence, likelihood, impact/severity, and recommended mitigation.
• Support and maintain the SCRM/Program Protection risk register, including documenting identified risks, risk owners, mitigation actions, preventative actions, contingency plans, due dates, status, supporting evidence, and closure criteria.
• Develop practical mitigation recommendations based on identified risks. Mitigation may include alternate sourcing, additional supplier qualification, increased inventory, supplier engagement, contractual protections, cybersecurity controls, technical changes, additional monitoring, or other appropriate risk treatments.
• Coordinate with responsible stakeholders to track mitigation activities and determine whether risk exposure has been reduced or additional action is necessary.
• Participate in IPT meetings, program reviews, SCRM and Program Protection working groups, supplier discussions, logistics meetings, engineering meetings, government/customer meetings, and other program forums as required.
• Prepare and present risk assessments, Vendor Health Assessments, leadership briefings, decision materials, meeting products, risk summaries, status reports, and recommendations for program and government stakeholders.
• Translate technical, supplier, intelligence-informed, logistics, and supply-chain information into concise products that clearly communicate what the risk is, why it matters, potential program impact, and what can be done about it.
• Independently manage assigned assessments and actions from initial identification through research, coordination, documentation, mitigation planning, reporting, and closure while seeking guidance when appropriate.
• Track assigned actions, suspense dates, stakeholder inputs, documentation, and mitigation activities to ensure work is completed accurately and on time.
• Maintain supporting evidence and documentation so SCRM and Program Protection assessments, decisions, recommendations, and mitigation actions are traceable, repeatable, and defensible.
• Identify gaps in available information and coordinate with appropriate organizations to obtain the data necessary to complete an assessment.
• Escalate significant or emerging risks when potential impacts require additional technical review, leadership awareness, government involvement, or program-level action.
• Assist with improving and standardizing SCRM and Program Protection processes, templates, assessment methodologies, continuity guides, trackers, risk documentation, and reporting products.
• Use Microsoft Excel, PowerPoint, Word, Teams, SharePoint, and other program-approved systems and analytical tools to perform research, manage data, document assessments, coordinate actions, and communicate results.

• Bachelor’s degree and applicable experience in project/program management, supply chain, logistics, cybersecurity, intelligence, engineering support, business operations, defense programs, or a related field. Additional relevant experience may be considered in lieu of a degree based on applicable company/job-family requirements.
• Demonstrated ability to conduct research, evaluate information from multiple sources, identify relevant information, and develop logical conclusions or recommendations.
• Strong analytical and problem-solving skills with the ability to work through unfamiliar or complex issues.
• Ability to take fragmented or incomplete information, determine what additional information is required, and coordinate with appropriate stakeholders to develop a complete assessment.
• Strong organizational skills with the ability to manage multiple assignments, priorities, suspense dates, stakeholders, and deliverables simultaneously.
• Ability to develop clear written products, including risk assessments, status reports, action items, presentations, summaries, and leadership updates.
• Strong written and verbal communication skills with the ability to communicate with both technical and non-technical personnel.
• Ability to work collaboratively across multiple functional organizations while also independently managing assigned work.
• Ability to exercise sound judgment, recognize when additional expertise or leadership involvement is required, and appropriately elevate significant risks or issues.
• Ability to learn new technical, supply-chain, sustainment, and Program Protection concepts and apply them to real-world program issues.
• Proficiency with Microsoft Office applications, particularly Excel, PowerPoint, Word, Outlook, Teams, and SharePoint.
• Ability to handle sensitive program information and comply with applicable company, contractual, customer, and government policies and procedures.
• Ability to obtain and maintain the security clearance required for the position.

• Experience supporting Department of War, U.S. Air Force, nuclear enterprise, aerospace, weapon-system sustainment, acquisition, logistics, cybersecurity, intelligence, engineering, or other defense programs.
• Experience or familiarity with Supply Chain Risk Management, Program Protection, supplier risk, cybersecurity, DMSMS, logistics lifecycle management, acquisition, or sustainment.
• Experience conducting supplier, vendor, component, or supply-chain research and developing assessments or recommendations from the results.
• Familiarity with supply-chain risk factors such as foreign dependencies, critical materials/minerals, single/sole-source suppliers, lower-tier supplier visibility, obsolescence, long lead times, geopolitical risk, cybersecurity, and supplier financial or operational health.
• Familiarity with risk management concepts, including risk identification, likelihood and consequence assessment, mitigation development, risk registers, preventative actions, contingency planning, and risk monitoring.
• Familiarity with DoW or Air Force Program Protection concepts, processes, documentation, or requirements.
• Experience working with engineers, logisticians, cybersecurity professionals, intelligence analysts, contracting personnel, suppliers, program managers, or government customers.
• Experience developing and presenting briefings or recommendations to program leadership or customers.
• Relevant education, training, or certifications such as DAU coursework, Program Protection/SCRM training, PMP, CAPM, Lean Six Sigma, supply-chain/logistics certifications, cybersecurity certifications, or similar professional development.