I
Cyber Security Policy Officer
Salary undisclosed
Apply on
Original
Simplified
Job Description
Job Description
- Must be able to work onsite (hybrid) in Oak Ridge, TN.
- Must be eligible for a federal security clearance (US Citizen)
Purpose:
Assist the Information Systems Security Manager (ISSM) and the Chief Information Security Officer (CISO) in the certification and accreditation (C&A) of systems/networks and implementation of cyber security requirements and procedures across the DOE facility. This role aligns with the Cybersecurity Division's mission to safeguard critical infrastructure, protect sensitive information, and drive cybersecurity research and innovation. By promoting collaboration, leveraging technology, and adhering to best practices, we ensure the resilience and integrity of our digital landscape while empowering stakeholders with secure solutions.
Duties and Responsibilities:
The ISSO is a primary stakeholder and facilitator of the continuous monitoring efforts that promote RMF compliance throughout the organization. The ISSO provides direction to IT and infrastructure support personnel on the application of security patches and secure configurations. Routine collaboration and consultation with the ISSM regarding the design, development, integration, and analysis of unclassified information systems. Under general supervision, the candidate is responsible for performing a full range of Information Assurance functions in support of the security needs.
Primary Responsibilities:
- Provide assistance to the ISSM and CISO in the certification and accreditation (C&A) of systems/networks and implementation of cybersecurity requirements and procedures across the DOE facility.
- Ensure systems are operated, maintained, and disposed of in accordance with DOE and DOE facility security policies and procedures and as outlined in applicable System Security Plans (SSPs).
- Perform documented procedures for authorizing users to access information systems.
- Develop and maintain SSPs for system C&A.
- Manage Plans of Action and Milestones to closure for information systems under accreditation.
- Provide guidance on policies and controls to support appropriate levels of risk, facilitate risk tolerance discussions and decisions, and recommend controls based on industry standards and practices. Escalate questions/concerns/issues to more senior-level staff as required.
- Participate in internal/external compliance audits, reviews, self-assessments, assessments, and data calls.
- Identify, promote, and make recommendations for process improvements.
- Assist with annual self-inspections, system certification testing, periodic security testing, and functional testing on systems/networks.
- Ensure compliance of all network equipment with applicable DOE and DOE facility requirements
- Other duties as assigned for support within the programs.
Basic Qualifications:
- Bachelor s degree with 5-7 years of relevant experience (ex. cybersecurity assessments, risk management, cybersecurity policy, and compliance, etc.). An equivalent combination of education and experience may be considered.
- Ability to obtain and maintain a DOE Q security clearance or equivalent is required.
- Strong analytical and organizational skills as well as problem solving capabilities to understand Cybersecurity risk and exposure (legal, regulatory violations, etc.).
- Demonstrated experience implementing compliance frameworks (NIST, etc.)
- Excellent interpersonal, verbal, written, and presentation communication skills.
- Thorough understanding of industry standards and regulations including NIST 800-53, NIST Risk Management Framework, NIST 800-82, and NIST Cybersecurity Framework (CSF).
- Working knowledge of privacy regulations and impacts.
- Experience with control systems and security requirements.
- Ability to work independently, meet deadlines, and uphold high ethical standards.
Preferred Qualifications:
- Active DOE Q or TS security clearance or equivalent.
- Master s degree in information assurance or related field with 4-6 years of relevant experience working in an information security, information technology or information risk management related field.
- Significant experience with control systems security.
- Cybersecurity certifications (CISSP, CISA, CISM, CRISC, CCSP, SSCP) and Incident Response Certification
- Privacy management, cybersecurity, evaluating security controls, identifying control gaps, and mitigating measures along with a strong understanding of business practices and technology concepts.
- Highly motivated individual with an enthusiasm for governance, risk and compliance who can communicate benefits and drive success.
- Demonstrated background in governance, risk, and compliance.
- Experience in obtaining Authority to Operate (ATO) for DOE government systems.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
Report this job Similar Jobs