C-SCRM & Post-Quantum Cryptography Subject Matter Expert (Antici

Department:
Programs
Location: Arlington, VA

Position: C-SCRM & Post-Quantum Cryptography Subject Matter Expert (Anticipated Position)

Location: Remote / Virtual

Employment: Full-Time or Contract

Clearance: Active Top Secret with SCI eligibility required

*Note: This position has not yet been funded. We are currently soliciting resumes from interested candidates in anticipation of a contract award.

Background:

Navanti Group is seeking a senior Cybersecurity Supply Chain Risk Management (C-SCRM) and Post-Quantum Cryptography (PQC) Subject Matter Expert to support a federal customer in strengthening enterprise supply-chain risk management and preparing acquisition processes for emerging cryptographic requirements.

The SME will support government stakeholders to improve C-SCRM strategy, vendor-risk assessment processes, risk-scoring methodologies, documentation, implementation guidance, and post-quantum cryptography readiness.

Responsibilities:

• Develop and refine an enterprise C-SCRM strategy and implementation plan
• Assess existing supplier and vendor risk-management processes and recommend improvements
• Develop standardized C-SCRM risk frameworks, methodologies, guides, and operating procedures
• Review and improve vendor-risk questionnaires, scoring criteria, and assessment methodologies
• Conduct analysis of post-quantum cryptography readiness within a federal acquisition environment
• Develop a PQC readiness roadmap aligned with NIST and applicable federal cybersecurity guidance
• Advise government stakeholders on cryptographic algorithms, modernization requirements, and emerging PQC risks
• Support development of repeatable processes for identifying, assessing, documenting, and mitigating cybersecurity supply-chain risks
• Translate complex cybersecurity, supplier, and technology risks into practical acquisition and risk-management decisions
• Support project management, quality management, status reporting, and transition activities

Required Qualifications:

• Minimum 3 years of experience establishing or managing a risk-management program that includes C-SCRM
• Demonstrated experience with cybersecurity supply-chain risk management, supplier/vendor risk, and third-party risk assessment
• Minimum 3 years of experience working with cryptographic algorithms
• Experience developing cybersecurity or risk-management strategies, frameworks, assessment methodologies, scoring models, SOPs, or implementation guidance
• Experience supporting the types of activities described above, including C-SCRM strategy, vendor-risk assessments, documentation, questionnaires, scoring, and implementation guidance
• One or more senior cybersecurity/risk certifications such as CISSP, CISM, CRISC, or equivalent
• Strong written and verbal communication skills and the ability to advise senior government stakeholders

Desired Skills and Experience:

• Direct experience with post-quantum cryptography and federal PQC transition requirements
• Knowledge of NIST SP 800-161 and related federal C-SCRM guidance
• Experience supporting federal acquisition, procurement, or GSA environments
• Experience developing supplier-risk scoring methodologies or technology/vendor assessment frameworks
• Experience translating technical cybersecurity risk into acquisition or executive decision-support products

Ideal Candidate:

The strongest candidate will combine hands-on C-SCRM program experience with deep cybersecurity risk-management expertise and meaningful cryptographic experience. This is not simply a general cybersecurity role. The successful candidate must be able to independently advise a federal customer on both supply-chain risk management and cryptographic modernization.

Equal Opportunity Statement

Navanti Group, LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, protected veteran status, or disability status.