Information Systems Security Officer (ISSO)

About the role

Oak Ridge National Laboratory (ORNL) is seeking an experienced Information Systems Security Officer (ISSO) to join the Information Assurance Group in the Field Intelligence Operations Division (FIOD). The position reports directly to the Group Leader and requires a Top Secret clearance with access to Q and SCI. FIOD operates under the Department of Energy Office of Intelligence and Counterintelligence authorities and serves as ORNL's focal point for all intelligence community matters, sitting within the National Security Sciences Directorate. The division provides operational security, information assurance, and IT support for ORNL's Sensitive Compartmented Information Facilities, clearances, and classified systems, supporting research and development on cybersecurity, cyber‑physical resiliency, data analytics, geospatial science, nuclear nonproliferation, and high‑performance computing for national security missions.

Responsibilities

• Leads continuous monitoring work that keeps FIOD systems compliant with the Risk Management Framework (RMF).
• Directs and assists programmatic IT and infrastructure support personnel in applying security patches and secure configurations in line with Security Technical Implementation Guides (STIGs).
• Performs the full range of information assurance functions in support of the ORNL FIE ISSM and Group Leader under general supervision.
• Consults routinely with the ISSM on the design, development, integration, and analysis of classified information systems.
• Provides day‑to‑day cybersecurity support for classified/Sensitive Compartmented Information (SCI) systems and ensures compliance with DOE‑IN, DoW, and NIST requirements across multiple facilities.
• Develops, reviews, and maintains System Security Plans (SSPs) and related RMF artifacts (hardware/software lists, diagrams, PPSM, categorization forms, continuous monitoring plans, contingency plans).
• Supports design and implementation of security controls, ensuring alignment with DISA STIGs and NIST 800‑53; assists with security architecture reviews, risk assessments, vulnerability analyses, and mitigation strategies; provides technical input for STIG feasibility and implementation, including possible automation of compliance checks.
• Manages Splunk and SolarWinds environments for log collection, correlation, and monitoring; creates and maintains dashboards, alerts, and reports for real‑time detection and response; investigates security incidents, documents findings, and implements corrective measures; performs regular audit log reviews, authorized data transfers, and media control in accordance with policy.
• Develops and maintains system documentation to support system authorization and accreditation; tracks system changes, security impact assessments, and coordinates with ISSM on approvals; conducts and supports continuous monitoring activities, including vulnerability management and reporting.
• Conducts annual account reviews, self‑inspections, and compliance testing; trains users and system administrators on security procedures and policy; supports ISSM in implementing local policies, reporting metrics, and preparing for inspections; continuously updates and enhances documentation best practices and