Summary

The Cyber Security Compliance Specialist II position plans, develops and maintains cyber security policy and plans for classified or proprietary materials, products, services, electronic documents and information systems. The position assures that to policies, procedures and plans comply with Department of Energy (DOE) orders and any other applicable requirements. The position analyzes, tests, implements, and maintains moderately complex cyber security systems as well as providing support for audits, surveys and special studies. Familiarization with all applicable requirements and policies is necessary for this position to support interaction with NNSA, DOE HQ and other leadership.

Duties and Responsibilities

• Prepares and assures the implementation of cyber security policies and procedures, system and application security plans, risk assessments and training materials.
• Plans, develops, coordinates, evaluates and presents cyber security awareness training
• Coordinates with DOE/NNSA to obtain rulings, interpretations, and acceptable deviations in regards to regulation/order compliance
• Represents team in meetings with internal/external customer base
• Recommends and/or implements policies and procedures in support of management objectives
• Develops and facilitates internal/external communications which may include processing and distribution of information through communications services
• Plans and schedules cyber security project activities to include monitoring and reporting project progress
• May perform other duties as required

You Must Have

• Minimum three (3) years of related experience in cyber security, security programs or compliance assurance
• Bachelor's degree in Cyber Security, Computer Science, Computer Engineering, Information Systems, a related discipline, or two additional years of direct work experience in lieu of bachelor's degree
• US Citizenship, capable of obtaining and maintaining a US Dept of Energy "Q" level security clearance.

We Value

• Advanced degree preferred.
• CertifiedInformationSystems Security Professional (CISSP).
• Excellent written and oral communication skills
• Ability to read and comprehend government compliance documents, maintain accurate records, prioritize work from multiple projects and analyze problems to develop innovative and effective solutions
• Knowledge of NIST special publications (FIPS 199, 200, 800-53, 800-37) and the certification and accreditation process.
• Ability to utilize interpersonal skills to effectively communicate with all levels of management and employees
• Demonstrated initiative to maintain technical/compliance currency through outside studies and training
• Skill in analyzing and interpreting computer system audit reports

FMT2021