Overview The Cyber Security & Digital Operations Division at Pacific Northwest National Laboratory (PNNL) is looking for a senior cybersecurity practitioner with strong governance, risk management and compliance (GRC) acumen in the instrumentation and control (I&C) domain, at both the organizational as well as the governmental level. Our ideal candidate brings diverse experiences in multiple cyber security domains and thrives on innovative approaches to hard problems in cyber security. As a member of the Risk & Governance team, your skills will advance our program in the areas of cyber risk management, governance and compliance management. The Cyber Risk & Governance team manages the cyber security program for the laboratory while also leveraging their expertise to engage with PNNL’s sponsors to support diverse missions both domestically and internationally. Responsibilities Key areas of job scope, responsibility, and skill include: Recognized for unique knowledge as a technical expert in the cyber security I&C domains and the application of that knowledge at the organizational or program level. Continually monitors against authorized security control requirements and reports system risks and application configurations or vulnerabilities. Conducts system, network, or software vulnerability audits, assessments and penetration testing in accordance with established processes and procedures. Conducts information system risk assessments and supports compliance documentation and system accreditation requirements. Engages company sponsors and provides leadership and professionalism when addressing their cybersecurity needs. Qualifications Minimum Qualifications: BS/BA and 5+ years of relevant work experience -OR- MS/MA and 3+ years of relevant work experience -OR- PhD with 1+ year of relevant experience Preferred Qualifications: Experience in multiple cyber security domains such as security and risk management, identity and access management, security engineering, business continuity/resilience, compliance, cryptography, application/software security, security operations, incident response etc. Experience in governance, risk management, and compliance activities such as system accreditation, security controls assessments, compliance reporting, and policy development. Experience in development and implementation of cyber security standards, regulations, and best practices for IT, OT and critical infrastructure sectors such as the energy sector. Experience working in the nuclear security domain with areas such as national regulation, or nuclear power plant or research reactor cybersecurity operations. Experience in cyber security policy development at the organizational, governmental and international levels. Strong interpersonal skills and the ability to interface with sponsor clients and laboratory scientific and operational staff as well as senior management. Experience in roles such as information systems security officer or manager (ISSO/ISSM) in classified or unclassified programs. Hazardous Working Conditions/Environment No hazardous conditions / environment are anticipated for this position. Additional Information This position requires the ability to obtain and maintain a federal security clearance. Requirements: * U.S. Citizenship * Background Investigation: Applicants selected will be subject to a Federal background investigation and must meet eligibility requirements for access to classified matter in accordance 10 CFR 710, Appendix B. * Drug Testing: All Security Clearance (L or Q) positions will be considered by the Department of Energy to be Testing Designated Positions which means that they are subject to applicant, random, and for cause drug testing. In addition, applicants must be able to demonstrate non-use of illegal drugs, including marijuana, for the 12 consecutive months preceding completion of the requisite Questionnaire for National Security Positions (QNSP). Testing Designated Position This position is a Testing Designated Position (TDP). The candidate selected for this position will be subject to pre-employment and random drug testing for illegal drugs, including marijuana, consistent with the Controlled Substances Act and the PNNL Workplace Substance Abuse Program. About PNNL Pacific Northwest National Laboratory (PNNL) is a world-class research institution powered by a highly educated, diverse workforce committed to the values of Integrity, Creativity, Collaboration, Impact, and Courage. Every year, scores of dynamic, driven people come to PNNL to work with renowned researchers on meaningful science, innovations and outcomes for the U.S. Department of Energy and other sponsors; here is your chance to be one of them! At PNNL, you will find an exciting research environment and excellent benefits including health insurance, flexible work schedules and telework options. PNNL is located in eastern Washington State—the dry side of Washington known for its stellar outdoor recreation and affordable cost of living. The Lab’s campus is only a 45-minute flight (or ~3-hour drive) from Seattle or Portland, and is serviced by the convenient PSC airport, connected to 8 major hubs. Commitment to Excellence, Diversity, Equity, Inclusion, and Equal Employment Opportunity Our laboratory is committed to a diverse and inclusive work environment dedicated to solving critical challenges in fundamental sciences, national security, and energy resiliency. We are proud to be an Equal Employment Opportunity and Affirmative Action employer. In support of this commitment, we encourage people of all racial/ethnic identities, women, veterans, and individuals with disabilities to apply for employment. Pacific Northwest National Laboratory considers all applicants for employment without regard to race, religion, color, sex (including pregnancy, sexual orientation, and gender identity), national origin, age, disability, genetic information (including family medical history), protected veteran status, and any other status or characteristic protected by federal, state, and/or local laws. We are committed to providing reasonable accommodations for individuals with disabilities and disabled veterans in our job application procedures and in employment. If you need assistance or an accommodation due to a disability, contact us at
[email protected]. Drug Free Workplace PNNL is committed to a drug-free workplace supported by Workplace Substance Abuse Program (WSAP) and complies with federal laws prohibiting the possession and use of illegal drugs. Mandatory Requirements Battelle requires employees to have a COVID-19 vaccine as a condition of employment, subject to accommodation. Applicants are required to disclose their vaccination status following a conditional offer of employment and must attest to being fully vaccinated with a Center for Disease Control (CDC)-approved COVID-19 vaccination or provide documentation of need for medical or religious exemption from the COVID-19 vaccination requirement. Please be aware that the Department of Energy (DOE) prohibits DOE employees and contractors from having any affiliation with the foreign government of a country DOE has identified as a “country of risk” without explicit approval by DOE and Battelle. If you are offered a position at PNNL and currently have any affiliation with the government of one of these countries, you will be required to disclose this information and recuse yourself of that affiliation or receive approval from DOE and Battelle prior to your first day of employment.