Cybersecurity Risk & Compliance Specialist

Cybersecurity Risk & Compliance Specialist

Idaho Falls, , United States (On-site)

As a Cybersecurity Risk and Compliance Specialist in the Computer Engineering department at Idaho National Laboratory, you’ll shape the future of national energy supply by performing compliance work that mitigates cybersecurity risk and ensures protection of company and allied assets and information. You’ll collaborate with world‑class scientists and engineers to develop designs that enable advanced nuclear reactor projects through multiple INL program sponsors and with external reactor developer partners.

The position is located at our Materials and Fuels Complex – the core of the U.S. nuclear research and development capabilities.

• Establish and maintain an IT/OT cyber risk management methodology and work with management to document those items and risk.
• Develop indicators and metrics for material technology risks, obligations, and controls.
• Collaborate with stakeholders across the organization to reduce the likelihood and potential impacts of risks that could be realized.
• Utilize the integrated risk management platform to monitor and report on the effectiveness of risk management controls and processes, and make recommendations for improvement.
• Coordinate the cybersecurity audit program; act as audit liaison to facilitate successful coordination with external auditors and the Lab.
• Coordinate audit meetings, assessment activities, and requests; represent the cybersecurity risk management program to INL senior leadership, DOE‑, DOE‑NE oversight, and internal and external auditors.
• Coordinate with accountable subject matter experts to develop and approve corrective action plans for audit findings; submit corrective actions to the CISO and unclassified ISSM.
• Track and communicate audit finding remediation milestones and due dates; provide status updates to DOE.
• Ensure accountable experts and management are aware of commitments to remediate findings and the status of ongoing remediations.
• Maintain external audit findings in DOE’s Enterprise Cybersecurity Enterprise Governance (ECGS) system.
• Serve as an advisor on all matters, technical and otherwise, involving security of assigned information systems.
• Develop policy, programs, and guidelines for implementation; promote awareness of cyber policy and strategy among management.
• Assess policy needs and collaborate with stakeholders to develop policies governing cyber activities.
• Review, conduct, or participate in assessments and audits of cyber programs and projects.
• Other duties as assigned.
• Education and Experience Levels
  • Level 3:
    Bachelor’s degree and 5 years of experience;
    Master’s and 2 years;
    PhD and 2 years.
  • Level 4:
    Bachelor’s degree and 9 years of experience;
    Master’s and 6 years;
    PhD and 4 years.
• Must hold the following professional certifications: ISC² CISSP, CompTIA Security+, Cloud+, Network+, Project+.
• This position requires obtaining and maintaining a Department of Energy “Q” clearance; U.S. citizenship is required.

• Pay range:
  Level 3 ($79,344 – $162,732) / Level 4 ($95,256 – $195,288). Compensation is based on education, relevant experience, and other credentials.
• TDP:
  This is a testing‑designated position; a pre‑employment drug screen and periodic testing are required.
• Multi‑Level: The posting allows placement at the appropriate level based on proven experience and skills.

The employee must frequently stand, walk, sit, stoop, kneel, bend, use hands to handle materials, manipulate tools, type, reach with hands and arms, and operate job‑related equipment. Occasional lifting or moving of up to 30 pounds is required. Sufficient visual acuity and hearing capacity to perform essential functions and interact with people is required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Medical, dental, vision, and flexible spending accounts
• 401(k) with 4.2% employer contribution and up to 4.8% match (regular positions)
• Paid time off (personal leave)
• Employee education program (tuition assistance for eligible positions)
• C…