# Third-Party & Supply Chain Risk Analyst at True Anomaly

- Company: True Anomaly
- What the company does: Delivering decisive capabilities for space superiority. Backed by Accel and Menlo.
- Company website: https://www.trueanomaly.space/
- Type: Startups (AI role)
- Level: Analyst
- Location: Denver, CO or Long Beach, CA or Washington, DC
- Work setup: On-site
- Pay: $105K to $150K base salary per year (USD)
- Posted: 2026-09-24
- Apply by: 2026-11-08
- Apply: https://job-boards.greenhouse.io/trueanomalyinc/jobs/5247466007
- Page: https://www.1752.vc/careers/jobs/true-anomaly-third-party-and-supply-chain-risk-analyst/

## About the role

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.

## What they're looking for

- Direct, hands-on experience executing third-party/vendor risk assessments, including questionnaire administration, documentation review, tiering, risk scoring, and remediation tracking
- Working knowledge of NIST SP 800-161 (C-SCRM), NIST SP 800-53, NIST SP 800-171, DoD RMF (IL5/IL6), and CMMC, with direct experience supporting assessments or audits under one or more of these frameworks
- Familiarity with risk assessment methodologies including FAIR and/or OCTAVE, with a desire to deepen applied expertise in risk quantification
- Hands-on experience with program management and GRC documentation tools including Jira, Confluence (Atlassian suite), MS Project, enterprise GRC and/or third-party risk platforms, and MS Visio or Lucidchart
- Strong written and verbal communication skills, with the ability to clearly document findings and translate third-party and supply chain risk concepts for both technical and non-technical audiences
- Highly organized, self-directed, and comfortable managing multiple workstreams simultaneously in a fast-paced, regulated environment

Tags: Governance, Risk, & Compliance