DirectJobHub
Jobs · Information Technology · Idaho

SMC - Information System Security Officer

Idaho National Laboratory · Idaho Falls, ID · 2 wk ago
On-siteInformation TechnologyFull-time

About the role

The role ensures the appropriate operational security posture for the Specific Manufacturing Capability (SMC) Information System (IS) is maintained, adhering to DoW and SMC Site cybersecurity policies, practices, and procedures.

Responsibilities

  • Conduct audits of SMC IS to ensure compliance with Joint Special Access Program (SAP) Implementation Guide (JSIG), DoW Cybersecurity Service Provider (CSSP) requirements.
  • Lead and direct the development of IS accreditation packages (i.e., system security plan, security control assessment, risk assessment, etc.) in accordance with federal directives and the Risk Management Framework (RMF).
  • Report all security-related incidents to the IS Information System Security Manager (ISSM).
  • Integrate applicable IS requirements, controls, and processes into design specifications in accordance with DoW established standards, policies, procedures, guidelines, directives, and regulations and laws (statutes).
  • Act as the subject matter expert (SME) in the security of basic network and telecommunications services/data (e.g., perimeter defense strategies, defense-in-depth strategies, and data encryption techniques).
  • Understand the policies, procedures, and controls required to protect network and telecommunication services and assess technical, operational, and administrative security controls as mandated by RMF standards.
  • Cook up any changes or modifications to hardware, software, or firmware of a system with the ISSM and AO/DAO prior to the change.
  • Ensure audit records are collected, reviewed, and documented (to include any anomalies).
  • Ensure all IS security-related documentation is current and accessible to properly authorized individuals.
  • Lead others in maintaining change control, ensuring configuration management of the IS to protect the system and data in accordance with technical, operational, and administrative security control requirements.
  • Perform a variety of data collection, analysis, reporting and briefing activities associated with security operations and maintenance to ensure that the organizational security policies are implemented and maintained on the IS.
  • Verify cybersecurity awareness training and requirements are current for IS users based on identified needs and organizational policies and within organizational time frames.
  • Develop IS training material as needed to support end-user training requirements.
  • Cover any changes or modifications to hardware, software, or firmware of a system with the ISSM and AO/DAO prior to the change.
  • Coordinate with the appropriate management and security offices to ensure IS users have the required security clearances and need-to-know authorizations before accessing information systems.
  • Collect and track required documentation for IS user accounts.
  • Identify, categorize, investigate, isolate, assess, and report IS cybersecurity incidents in coordination with other organizations.
  • Cook up any changes or modifications to hardware, software, or firmware of a system with the ISSM and AO/DAO prior to the change.
  • Coordinate with the appropriate security offices to ensure that physical controls are implemented as required.
  • Participate in the creation, review, and assessment of policies and procedures supporting the secure use and operation of SMC information systems that includes, but is not limited to, system security plans, vulnerability management, risk management, configuration management, change management, and others.
  • Promote awareness of cyber policy and strategy as appropriate among management and ensure sound principles are reflected in the organization's mission, vision, and goals.
  • Aid the ISSM in meeting their duties and responsibilities.
  • Attend required technical and security training (e.g., operating system, networking, security management) relative to assigned duties.
  • Maintain required IA certifications.

Requirements

  • Level 4 - Bachelor’s and 9 years of experience.
  • Master’s and 6 years of experience.
  • PhD and 4 years of experience.
  • Relevant experience commensurate with level.
  • DoD 8570/8140 IAM Level II certification.
  • CISSP or CISM preferred.
  • If candidate has relevant experience commensurate with level, IAM Level II may be obtained within 6 months of hire.
  • Working experience with NIST 800-53, CNSS 1253, FISMA, and/or JSIG Rev 4.
  • Strong analytical and problem-solving skills.
  • Must be a US Citizen and hold an active DOE “Q” clearance (or DOD/DOJ equivalent).

Qualifications

  • Strong analytical and problem-solving skills.
  • Sufficient visual acuity and hearing capacity to perform the essential functions and interact with people is required.
  • The work environment is an office environment which may include stairs.
  • The noise level is generally moderate; however, may be exposed to loud noises on occasion.
  • The position requires working more than 8 hours/day, irregular hours, and working alone.

Skills

  • Strong analytical and problem-solving skills.
  • Sufficient visual acuity and hearing capacity to perform the essential functions and interact with people is required.
  • The work environment is an office environment which may include stairs.
  • The noise level is generally moderate; however, may be exposed to loud noises on occasion.
  • The position requires working more than 8 hours/day, irregular hours, and working alone.

Benefits and Relocation

  • Medical, Dental, Vision, and Flexible Spending Accounts.
  • 401(k) with a 4.2% employer contribution and up to 4.8% match (regular positions) or self-contribute access (postdoctoral positions).
  • Paid time off (personal leave).
  • Employee Education Program (tuition assistance for eligible positions).
  • Comprehensive Relocation Package.
  • Benefit eligibility subject to multiple factors, including employment status and position classification.

Security and Privacy Language

This position includes information security and privacy responsibilities as defined by NIST SP 800 53, OMB Circular A 130, and DOE Order 206. The incumbent must sign and comply with all required access agreements prior to being granted access to organizational systems or data. Comply with all applicable information security and privacy policies and procedures by following established protocols, with an understanding that non-compliance may result in sanctions.

About Us

Idaho National Laboratory (INL) is an Equal Employment Opportunity (EEO) employer. It is the policy of INL to provide equal employment opportunities to all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information. The laboratory works with national and international governments, universities and industry partners to change the world's energy future and secure our nation's critical infrastructure. INL Mission Our mission is to discover, demonstrate and secure innovative nuclear energy solutions, other clean energy options and critical infrastructure. INL Vision Our vision is to change the world's energy future and secure our nation's critical infrastructure.

Similar jobs