ETC - IT/Security

Security Requirement: CAA Access; Q level security clearance

About the role

The IT Security Specialist is responsible for the maintenance and implementation of Enrichment Technology US, Inc. (ETC USA) information security policies, procedures, standards, and guidelines. This role manages information security processes for ETC USA activities in line with corporate policies of Enrichment Technology Company Ltd. (ETC) and in compliance with risk management-based regulatory requirements set forth by the Nuclear Regulatory Commission (NRC) and Department of Energy (DOE). The position also supports IT tasks including maintenance, troubleshooting, and repair of general IT-related issues and works directly with the Corporate ETC IT team to address and solve on-site issues. In the absence of the Facility Security Officer (FSO), may serve as the interim FSO.

Responsibilities

• Promote the ETC Safety Improvement Plan in the workplace.
• Maintain a risk and control framework that reflects the IT control environment and aligns with information security policy and standards.
• Use regulatory-prescribed risk assessment methodologies to identify risks and opportunities for strengthening controls.
• Provide information assurance and security based on the risk management framework as set forth by the DOE, comparable to the NIST framework.
• Achieve and maintain full system accreditation by the DOE as the Designated Accreditation Authority (DAA) for all classified systems within ETC USA.
• Prepare and review Certification and Accreditation packages (ISSPs, network diagrams, procedures, etc.) and changes for ETC USA information systems.
• Conduct periodic tests of information systems and analyze results to evaluate the need for corrective or strengthening actions.
• Provide information security support and technical guidance in all phases of the lifecycle of accredited systems at ETC USA.
• Perform testing and conduct quarterly and/or annual security reviews to ensure data integrity, prevent data loss, and prevent compromise of classified information.
• Identify security vulnerabilities and provide guidance on mitigating risks to ETC USA classified and accredited systems.
• Ensure compliance with Information Security Standard ISO 27001.
• Supervise that personal data is processed in accordance with national and international statutory regulations.
• Address weaknesses discovered from information security incidents and findings during audits and inspections.
• Develop, maintain, and provide user training.
• Ensure troubleshooting, repairs, testing, and maintenance for classified networks and equipment are performed as per approved plans.
• Establish and maintain an up-to-date software and hardware inventory for the accredited network and systems.
• Provide support to users for hardware and software problems on workstations within the classified network.
• Generate condition reports (CR) to document noted problems, whether security-related or otherwise.
• Document all concerns in the ETC USA corrective action program.
• Maintain and update computer network documentation and computer maintenance manuals.
• Act as the link between ETC USA IT function and ETC IT to ensure adherence to group policy.
• Perform troubleshooting and repairs of IT systems in collaboration with the ETC IT Corporate team.
• Ensure system and end-user data is recoverable and backed up regularly.
• Confirm and abide by all regulations, policies, work procedures, and instructions.

Requirements

• Bachelor’s degree in Computer Science or equivalent. Experience in IT Security and IT systems can be considered in lieu of formal education.
• 3+ years of experience in managing information systems and system security.
• Experience working with networking equipment, Microsoft Windows Operating systems, TCP/IP, Oracle, UNIX, and SQL.

Qualifications

• 5+ years of experience in managing information systems and system security (preferred).
• Knowledge of and familiarity with federal requirements (NRC, DOE, NIST) for Information Systems Security (preferred).

Work Environment

This job operates in a professional office environment with some potential for radiological exposure expectations of < 100mrem/year. Work settings may include general office, plant/production areas with low light, confined spaces, near moving parts, radiation, risk of electrical shock, chemicals, vibration, and outdoor conditions with extreme temperatures. Routine use of standard office equipment such as computers, phones, photocopiers, and filing cabinets.

Travel

Yes; 10% or less, or as required.

Schedule

Professional work schedule with minimal night/weekend support as determined by supervisor/manager, generally Monday through Friday. Some night and weekend work may be required. Employees may be subject to call-outs based on business needs.

Pay

Compensation starting at $110,000 - $135,000 per year, dependent on candidate experience.