Third Party Risk Management (Supply Chain) Design Lead

Accountabilities: Design, document, and continuously improve Supply Chain Risk Management processes, workflows, and operational procedures. Identify opportunities to increase efficiency, effectiveness, and stakeholder satisfaction throughout the risk management lifecycle. Develop process maps, workflow diagrams, standard operating procedures, and supporting documentation. Assess evolving regulatory requirements and industry best practices, recommending enhancements to risk management processes. Collaborate with business, operational, technology, and risk stakeholders to understand needs and develop scalable solutions. Facilitate stakeholder discussions, gather requirements, build consensus, and drive adoption of new processes and capabilities. Influence cross-functional teams and secure support for process improvements and strategic initiatives without direct authority. Translate business requirements into actionable process changes and technical enhancements. Create and manage Jira stories, enhancement requests, workflow updates, and defect remediation activities. Support User Acceptance Testing (UAT), validating delivered solutions against business requirements. Partner with training and communications teams to develop user guidance, job aids, and training materials. Maintain and enhance risk management workflows and supporting platforms, including ProcessUnity. Contribute to enterprise risk transformation and continuous improvement initiatives. Requirements: Bachelor’s degree in Business, Risk Management, Information Security, Supply Chain Management, or a related field; equivalent professional experience may be considered. At least 5 years of experience leading or supporting process improvement, business transformation, or risk and control framework initiatives. At least 5 years of leadership experience, with demonstrated ability to influence stakeholders and drive initiatives without direct authority. Minimum of 3 years of experience in Supply Chain Risk Management (SCRM), Third-Party Risk Management (TPRM), Vendor Risk Management, or a related risk discipline. Hands-on experience with Jira, including requirements management, user story creation, defect tracking, workflow management, and enhancement delivery. Proven ability to gather, document, and translate business requirements into process improvements and technology solutions. Strong stakeholder management skills, including experience working with senior leaders, technical teams, and external organizations. Experience creating process documentation, workflow diagrams, standard operating procedures, and training materials. Working knowledge of NIST 800-53, NIST 800-161, NIST 800-171, and the NIST Cybersecurity Framework (CSF). Familiarity with ISO/IEC 27002, ISO/IEC 27036, and ISO/IEC 20243 (O-TTPS). Experience using Microsoft Visio or similar process-mapping tools. Six Sigma certification or demonstrated expertise in process improvement. Experience with ProcessUnity or other Third-Party Risk Management platforms is preferred. Extensive experience designing and optimizing enterprise risk management workflows is an advantage. Familiarity with category taxonomies, governance frameworks, and enterprise process models is desirable. Experience in highly regulated or compliance-driven environments and large-scale process transformation or change management initiatives is preferred. Excellent communication, facilitation, analytical, and problem-solving skills. Benefits: Salary range: $109,500–$213,500 USD for eligible locations, including Virginia, Maryland, Washington, DC, and other specified states. Fully remote work environment. Competitive benefits package. Opportunities for professional development, hands-on learning, certifications, and industry training. Collaborative work environment with opportunities to contribute to meaningful federal government missions. Career growth and continuous learning opportunities. Inclusive culture that values diverse perspectives, professional development, and employee well-being.