Posting Title

Senior Information Systems Security Officer

.

Location

Remote

.

Position Type

Regular

.

Hours Per Week

40

.

Working at NREL

Join a team of world-class scientists, engineers, and visionaries dedicated to shaping the world’s energy future through cutting-edge research and innovation. From our vision to our NREL community, we are unique in the research community. We are focused on impact. From our work in basic sciences to systems engineering, analysis, demonstration, and deployment, we are focused on solving market-relevant problems that result in advanced, secure, reliable, and affordable energy systems. We are trusted clean energy leaders, developing cost-saving solutions that make U.S. industries more competitive, and support job creation and economic growth across rural and urban communities.

At NREL, we offer a unique, mission-driven work environment with cutting-edge facilities and multidisciplinary research teams. NREL's environment offers strong partnerships with industry, academia, and other national laboratories, as well as professional development opportunities and a competitive benefits package for employees.

Learn about NREL’s critical objectives: NREL's Mission and Vision.

Job Description

Summary:

As a Senior Information Systems Security Officer, you serve as the principal advisor on security and privacy for NREL information systems. Reporting to the Information Systems Security Manager, the Senior Information Systems Security Officer assesses information systems and develops system security plans to ensure NREL is appropriately protected from risk.

Job Duties:

• Partner with NREL operational units to identify, analyze and mitigate security risk for NREL information systems utilizing IT controls.
• Facilitate compliance with NREL’s implementation of the NIST framework, including risk assessment, control design, system authorization, audit assessment and continuous monitoring.
• Maintain policies and procedures that support the security and privacy of NREL’s information technology operating environment.
• Perform security and privacy risk assessments for new systems and significant system changes.
• Develop corrective action plans with process owners to address control design or operating deficiencies.
• Lead projects that improve the effectiveness and efficiency of NREL’s information security program.
• Ensure awareness of security requirements and policies across the organization.

.

Basic Qualifications

Relevant Bachelor's Degree and 9 or more years of experience or equivalent relevant education/experience. Or, relevant Master's Degree and 7 or more years of experience or equivalent relevant education/experience. Or, relevant PhD and 4 or more years of experience or equivalent relevant education/experience. Applies extensive IS expertise in specific field and has full knowledge of related disciplines. Evaluates new hardware, software, systems tools and applications and makes procurement recommendations. Excellent leadership and project management skills. Skilled in analytical techniques, practices and problem solving. Extensive programming and architecture abilities with various computer software programs and information systems.

* Must meet educational requirements prior to employment start date.

Additional Required Qualifications

​Standard Requirements for All Cyber Positions:

• Ability to perform research, read documentation, and independently learn new skills.
• Ability to work both alone and as part of a collaborative team.
• Demonstrated skills in critical thinking and problem solving.
• Excellent communication skills, including active listening, ability to prepare and deliver presentations, and clear written correspondence and documentation.

Must be able to obtain and maintain a DOE (L or Q) security clearance and SCI access. SCI access may require a polygraph examination.

NOTE:  To obtain a clearance, an individual must be at least 18 years of age; U.S. citizenship is required except in very limited circumstances. See DOE Order 472.2 for additional information.

Preferred Qualifications

• Applicable information security certifications (CISSP, CISA, CRISC, FITSP-M or similar).
• Existing acti