Idaho National Laboratory

Cybersecurity Risk & Compliance Specialist

Idaho National Laboratory$79K — $195K *
Information Technology
5 - 7 years of experience
Job Overview by Ladders

Qualifications

  • Bachelor's degree required; advanced degree preferred with applicable experience.
  • 5-9 years of relevant experience depending on degree level.
  • Professional certifications including ISC2 CISSP, COMPTIA Security+, Cloud+, Network+, Project+ are mandatory.
  • U.S. citizenship is required due to security clearance needs.
  • Ability to maintain a Department of Energy 'Q' clearance is necessary.

Responsibilities

  • Develop and implement cybersecurity risk management processes.
  • Conduct risk assessments and compliance audits on cybersecurity protocols.
  • Collaborate with internal and external stakeholders to address risk management.
  • Monitor and report on risk management effectiveness and suggest improvements.
  • Coordinate cybersecurity audits and liaise with external auditors to manage assessments.
  • Document cybersecurity compliance issues and track remediation progress.
  • Advise on policies and guidelines concerning information system security.

Benefits

  • Comprehensive medical, dental, and vision coverage.
  • 401(k) plan with employer contributions and matching.
  • Paid personal leave for work-life balance.
  • Tuition assistance through Employee Education Program.
  • Comprehensive relocation support for new hires.
Full Job Description
Job Description

As a Cybersecurity Risk and Compliance Specialist in the Computer Engineering department at Idaho National Laboratory, you'll shape the future of national energy supply by performing mechanical design and analysis of advanced nuclear reactors and associated systems. You'll collaborate with world-class scientists and engineers to develop designs that enable advanced nuclear reactor projects through multiple INL program sponsors. This position is located at our Materials and Fuels Complex, which hosts the core of the U.S. nuclear research and development capabilities with a diverse array of nuclear facilities and reactor experiment test beds. In this role you will collaborate with multiple organizations within INL and external reactor developer partners. Our team works a 4x10 schedule every Friday off.

You will develop and evaluate compliance with programs and processes to mitigate cybersecurity risk and ensure protection of company and allied assets and information. Research and interpret current and pending governmental laws and regulations, industry standards and customer and vendor contracts to communicate compliance requirements. Conduct information security risk assessments, security compliance audits and cybersecurity audits. Document, investigate, and report cybersecurity compliance issues and incidents. Work with business leaders to ensure information security risk findings are reviewed and solutions are implemented.

Requirements:
  • Establish and maintain an appropriate IT/OT Cyber risk management methodology and work with management to document those items and risk.
  • Develop indicators and metrics for material technology risks, obligations, and controls.
  • Collaborate with stakeholders across the organization to reduce the likelihood and potential impacts to risks that could be realized.
  • Utilize the integrated risk management platform to monitor and report on the effectiveness of risk management controls and processes and make recommendations for improvement as needed.
  • Coordinate the cybersecurity audit program.
  • Act as the audit liaison to facilitate successful coordination with external auditors and the Lab. Coordinate audit meetings, assessments activities, and requests. Represent the Cybersecurity risk management program to INL senior leadership, DOE-ID, DOE-NE oversight, and internal and external auditors.
  • Coordinate with accountable Subject Matter Experts to ensure development and appropriate management approval of corrective action plans to address audit findings. Submit corrective actions to the CISO and unclassified ISSM.
  • Track and communicate audit finding remediation milestones and due dates. Provide status and milestone updates to DOE.
  • Ensure accountable Subject Matter Experts and management are aware of commitments to remediate findings and the status of ongoing remediations.
  • Maintain external audit findings in DOE's Enterprise Cybersecurity Enterprise Governance (ECGS) system.
  • Serve as an advisor on all matters, technical and otherwise, involving security of assigned information systems.
  • Develop policy, programs, and guidelines for implementation.
  • Maintain communication channels with stakeholders.
  • Promote awareness of cyber policy and strategy as appropriate among management and ensure sound principles are reflected in the organization's mission, vision, and goals.
  • Assess policy needs and collaborate with stakeholders to develop policies to govern cyber activities.
  • Review, conduct, or participate in assessments and audits of cyber programs and projects.
  • Other duties as assigned.


Minimum Requirements:
  • Level 3: Bachelor's and 5 years of experience. Master's and 2 years of experience. PhD and 2 years of experience.
  • Level 4: Bachelor's and 9 years of experience. Master's and 6 years of experience. PhD and 4 years of experience.
  • Must have the following Professional Certifications: ISC2 CISSP, COMPTIA Security+, Cloud+, Network+, Project+.
  • This position requires the ability to obtain and maintain a Department of Energy "Q" clearance, which requires US Citizenship.


Job Information:
  • The pay range for this position is: Level 3 ($79,344- $162,732)/ Level 4 ($95,256 - $195,288). At Idaho National Laboratory compensation decisions are determined using factors such as education, relevant experience, and other credentials.
  • TDP: This is a testing designated position; you will be required to submit to a pre-employment drug screen and periodic drug testing throughout the term of your employment.
  • Multi-Level: This is a multi-level posting and you will be placed at the appropriate level dependent on depth and breadth of proven experience and skills.


Physical Requirements:

While performing the duties of this classification, the employee is frequently required to stand, walk, sit, stoop, kneel, bend, use hands to handle materials, manipulate tools, keyboard and type, reach with hands and arms, and operate job related equipment. The employee must occasionally lift and/or move up to 30 pounds. Sufficient visual acuity and hearing capacity to perform the essential functions and interact with people is required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Benefits and Relocation

  • Medical, Dental, Vision, and Flexible Spending Accounts
  • 401(k) with a 4.2% employer contribution and up to 4.8% match (regular positions) or self-contribute access (postdoctoral positions)
  • Paid time off (personal leave)
  • Employee Education Program (tuition assistance for eligible positions)
  • Comprehensive Relocation Package
  • Benefit eligibility subject to multiple factors, including employment status and position classification.


At this time, BEA will not sponsor any H1-B visas obtained outside of the United States of America (U.S.A.), including consular visas.

About Idaho National Laboratory

Idaho National Laboratory (INL) is a science-based, applied engineering national laboratory dedicated to supporting the U.S. Department of Energy's mission in nuclear energy research, science, and national defense. INL is operated by Battelle Energy Alliance, LLC, a partnership between Battelle, BWX Technologies, Inc., and Texas A&M University System. INL's work is focused on delivering solutions to some of the nation's most pressing challenges in energy, national security, science, and the environment. INL's research and development capabilities are organized into four primary areas: Nuclear Science and Technology, National and Homeland Security, Energy and Environment, and Biological Science and Engineering.
Learn more about Idaho National Laboratory
Size
4,000 employees
Industry

Similar Jobs

More Jobs at Idaho National Laboratory

More Information Technology Jobs

Find similar Cybersecurity Risk & Compliance Specialist jobs: