Third-Party & Supply Chain Risk Analyst

Space is a warfighting domain. True Anomaly seeks those with the talent and ambition to build the technology that secures it.

True Anomaly delivers decisive capabilities for space superiority. We build autonomous spacecraft, advanced payloads, mission software, and space-based interceptors — enabling the U.S. and its Allies to secure the space environment and counter threats from the ultimate high ground.

• Be the offset. We create asymmetric advantages with creativity and ingenuity.

• What would it take? We challenge assumptions to deliver ambitious results.

• It’s the people. Our team is our competitive advantage and we are better together.

BENEFITS & PERKS*

• Best-in-class healthcare: 100% company-paid medical, dental, and vision coverage for you and your dependents, with HSA/HRA options

• Generous time off: Flexible Time Off (FTO) for exempt employees, accrued PTO of up to 25 days for non-exempt employees, plus 12 paid holidays; Parental Leave; Sick Leave

• Fuel for your day: Daily catered lunch and unlimited snacks for in-office employees

• And more: 401(k) retirement plan, fitness reimbursement, and Dog Fridays

• Equity participation: Equity is included as part of our total compensation package, giving you an opportunity to share in the company’s success.

*Do not apply to fixed term and temporary roles

We are seeking a driven and detail-oriented Third-Party & Supply Chain Risk Analyst to own the day-to-day execution of our Third-Party Vendor Risk Management (TPVRM) and Cyber Supply Chain Risk Management (C-SCRM) programs, with a secondary line of effort supporting the broader Enterprise Risk Management (ERM) function. Reporting to the Senior Enterprise Risk Manager, you will play a hands-on role assessing suppliers and subcontractors, tracing risk through our hardware and software supply chains, tracking remediation, and building the data foundation that powers executive-level decisions about who we buy from and depend on.

This role is ideal for a mid-career risk professional who is fluent in frameworks such as NIST RMF, NIST SP 800-161 (C-SCRM), and CMMC, is developing practical experience with risk quantification methodologies like FAIR and OCTAVE, and is eager to grow within a fast-paced aerospace and defense environment where the supply chain spans spacecraft hardware, payloads, and mission software. You will work closely with procurement, supply chain, engineering, security, legal, and compliance teams to identify, document, and track risk across our full population of vendors, suppliers, and the components they deliver.

Third-Party Vendor Risk Management

• Own and execute the vendor risk assessment lifecycle end to end — intake, tiering, onboarding due diligence, and periodic reassessment — including security questionnaire administration, documentation review, and risk scoring.

• Maintain the vendor risk inventory and lifecycle tracking records, ensuring every vendor and subcontractor is appropriately tiered by criticality and data/access exposure, and is reassessed on schedule.

• Continuously monitor third-party risk signals —