IT​/Security

Summary of Responsibilities

The IT Security Specialist is responsible for the maintenance and implementation of the Enrichment Technology US, Inc. (ETC USA) information security policies, procedures, standards, and guidelines. The IT Security Specialist is also responsible for the management of information security processes for ETC USA activities in line with the corporate policies of Enrichment Technology Company Ltd. (ETC) and in compliance with risk;

management based regulatory requirements as set forth by the Nuclear Regulatory Commission (NRC) and Department of Energy (DOE). This role also supports IT tasks including maintenance, troubleshooting, and repair of general IT related issues. This position will work directly with the Corporate ETC IT team to address and solve general on-site issues. In the absence of the Facility Security Officer (FSO), may serve as the interim FSO.

Minimum Qualifications

• Bachelor’s degree in Computer Science or equivalent. Experience in IT Security and IT systems can be considered in lieu of formal education
• 3+ years’ of experience in managing information systems and system security
• Must have experience in working with networking equipment, Microsoft Windows Operating systems and must have experience with TCO/IP, Oracle, UNIX, and SQL

Preferred Qualifications

• 5+ years’ experience in managing information systems and system security
• Knowledge of and familiarity with federal requirements (NRC, DOE, NIST) for Information Systems Security

• The work location for this position is with ETC at the Urenco USA facility in Eunice, NM
• Security Requirement: CAA Access; Q level security clearance
• Work Schedule:
  
  Professional work schedule with minimal night/weekend support as determined by supervisor/manager, generally Monday through Fridays. Some night and weekend work maybe required. Employees may be subject to call outs based on business needs.
• Travel:
  Yes; 10% or less/or as required
• Work Environment:
  This job operates in a professional office environment with some potential for radiological exposure expectations of < 100mrem/year. General office, plant/production with low light, confined spaces, near moving parts, radiation, risk of electrical shock, chemicals, vibration, outdoor with extreme cold, heat, wet or dry conditions. This role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets, etc.

• Promote the ETC Safety Improvement Plan in the workplace
• Maintain a risk and control framework that actually reflects the IT control environment and alignment to the information security policy and standards.
• Use regulatory prescribed risk assessment methodologies to identify risks and opportunities to strengthening control.
• Provide information assurance and information security based on the risk management framework as set forth by the DOE, comparable to the framework of the National Institute of Standards and Technology (NIST).
• Achieve and maintain full system accreditation by the DOE as the Designated Accreditation Authority (DAA), for all classified systems within ETC USA.
• Prepare and reviewing Certification and Accreditation packages (ISSP's, network diagrams, procedures, etc. and changes thereto) for the ETC USA information systems.
• Conduct periodic tests of the information systems and analyzing the test results to evaluate for the need of corrective of strengthening action of the information infrastructure.
• Provide information, security support and technical security guidance in all phases of the lifecycle of the accredited systems at ETC USA.
• Perform testing and conduct quarterly and/or annual security reviews to assure the data integrity of the ETC USA systems, to prevent data loss and…