Isolated Environment Operations Cyber Security Liaison

Requisition Id 15038 

 

Overview:

We’re hiring an Operations Cybersecurity Liaison to serve as the critical interface between operational functions and cybersecurity governance within classified and isolated network environments! This role ensures that operations within secure systems align with cyber compliance requirements and risk management frameworks. In this role, you’ll support cyber risk tracking, lead documentation of risk acceptance, and maintain cybersecurity compliance artifacts for systems not connected to external networks.

 

This position resides in the Support Services & Isolated Environments group in the Research Computing division, in the Information Technology Services Directorate at Oak Ridge National Laboratory (ORNL).  

 

Major Duties/Responsibilities: 

 

Cyber Risk Monitoring & Coordination:

• Review weekly cybersecurity reports related to classified/air-gapped systems and identify operational relevance.

• Coordinate response and remediation efforts with operations teams to address vulnerabilities and findings.

• Track cybersecurity actions, findings, and Plans of Action and Milestones (POA&Ms) in accordance with compliance schedules.

 

Risk Acceptance Documentation:

• Lead the preparation and submission of risk acceptance requests, to ISSO/ISSM’s to submit to the DOE Authorizing Officials, and mission stakeholders.

• Ensure all documentation supports clear risk justification, operational mission impact, and required mitigations.

• Maintain RAF decisions and ensure periodic revalidation in accordance with classified and isolated system governance protocols.

 

System Security Plans & Compliance Artifacts:

• Assist cyber in the development and maintaining the System Security Plans (SSPs), Configuration Management Plans, and Contingency Plans for isolated/classified environments from an operations viewpoint.

• Work closely with the operations team to ensure documentation accurately reflects implementation of security controls (NIST 800-53 or similar).

• Support Assessment and Authorization (A&A) opera activities and ensure artifacts are audit ready.

 

Cyber Governance Integration:

• Serve as the bridge between Operations and Cyber Governance to ensure mission continuity while maintaining security compliance.

• Participate in Configuration Control Boards (CCBs), Risk Management Boards (RMBs), and governance forums representing operational needs and constraints.

• Translate cybersecurity requirements into operational actions and timelines.

• Deliver ORNL’s mission by aligning behaviors, priorities, and interactions with our core values of Impact, Integrity, Teamwork, Safety, and Service. Promote equal opportunity by fostering a respectful workplace – in how we treat one another, work together, and measure success.

 

Basic Qualifications:

• A BS degree in computer science, computer engineering, information technology, information systems, science, engineering, business, or a related discipline and a minimum of five (5) to seven (7) years of aligned professional experience is required for consideration. An overall combination of equivalent education and experience may be considered.

  • Masters and PhD degree holders in the same fields of study are also encouraged to apply:

    • Masters’ holders should have a minimum of four (4) to six (6) years of relevant and aligned experience.