Requisition Id 16782

Overview:

We're hiring an Information Systems Security Officer (ISSO) to facilitate continuous monitoring and RMF compliance across the organization. The ISSO will collaborate with various groups and ensure DOE security policies are properly implemented. Reporting to the Cyber Governance Unclassified Team Leader, the selected candidate will interact with all levels of the organization. The ISSO is responsible for ensuring security and compliance of unclassified and classified information systems through policy implementation, user authorization, and system monitoring.

This position resides in the Cyber Governance group in the Cybersecurity division in the Information Technology Services Directorate at Oak Ridge National Laboratory (ORNL).

Major Duties/Responsibilities:

The ISSO leads continuous monitoring initiatives to maintain Risk Management Framework (RMF) compliance across the organization. They serve as the primary facilitator between security requirements and implementation, requiring strong information security knowledge, problem-solving capabilities for complex security challenges, and effective communication skills to bridge technical and non-technical stakeholders. This role is crucial for maintaining robust security posture and ensuring compliance with established frameworks.

• Operate and maintain systems per DOE and NNSA security policies and SSPs
• Establish user authorization procedures for unclassified and classified systems
• Support ISSM in cyber security policy implementation
• Develop/maintain SSPs and manage POA&Ms
• Conduct compliance reviews against NIST/CNSSI standards
• Oversee configuration management and change control
• Implement system recovery processes and contingency plans
• Assist with security testing and annual inspections
• Review system audit records
• Document procedures and conduct user training
• Other duties as assigned for support within the program

Basic Qualifications:

• BS in information technology, information systems, or a related discipline and a minimum of 5-7 years of aligned professional Cybersecurity experience with a proven track record of implementing enterprise-wide security plans and controls is required for consideration. An overall combination of equivalent education and experience may be considered.
• Demonstrated expertise in security control assessments and compliance frameworks (NIST 800-53, NIST CSF, CNSSI, ISO 27001, CIS), with strong analytical skills for evaluating cyber risks.
• Superior communication abilities across written, verbal, and presentation formats, with experience developing comprehensive cybersecurity documentation.
• Proven ability to work autonomously while maintaining strict deadlines and ethical standards in complex technical environments.

Preferred Qualifications:

• An MS in information technology, information systems, or a related discipline and a minimum of 4-6 years of aligned professional Cybersecurity experience with a proven track record of implementing enterprise-wide security plans and controls
• Valid DOE Q, DOD Top Secret, or DOD TS/SCI clearance.
• Demonstrated success obtaining Authorization to Operate (ATO) for government systems while managing competing priorities in high-pressure situations
• Industry-recognized certifications (CISSP, CISM, CISA, CRISC) and extensive experience with vulnerability management tools and processes
• Deep understanding of incident response procedures and enterprise security tool implementation

Special Requirements:

• Visa sponsorship is not available for this position.

This position requires the ability to obtain and maintain a clearance from the Department of Energy. As such, this position is a Workplace Substance Abuse (WSAP) testing designated position. WSAP positions require passing a pre-placement drug test and participation in an ongoing random drug testing program.

For employment at Oak Ridge National Laboratory (ORNL), a Real ID compliant form of identification will be required. Additionally, ORNL is subject to Department of Energy (DOE) access restrictions. All employees must also be able to obtain and maintain a federal Personal Identity Verification (PIV) card as mandated by Homeland Security Presidential Directive 12 (HSPD-12) and Department of Energy (DOE) Order 473.1A, which requires a favorable post-employment background investigation.

To obtain this credential, new employees must successfully complete and pass a Federal Tier 1 background check investigation. This investigation includes a declaration of illegal drug activities, including use, supply, possession, or manufacture within the last year. This includes marijuana and cannabis derivatives, which are still considered illegal under federal law, regardless of state laws.

If you have difficulty using the online application system or need an accommodation to apply due to a disability, please email: [redacted].

This position will remain open for a minimum of 5 days after which it will close when a qualified candidate is identified and/or hired.

We accept Word (.doc, .docx), Adobe (unsecured .pdf), Rich Text Format (.rtf), and HTML (.htm, .html) up to 5MB in size. Resumes from third party vendors will not be accepted; these resumes will be deleted and the candidates submitted will not be considered for employment.