Information Systems Security Officer ISSO

Position:Information Systems Security Officer ISSO

Location: Knoxville, TN

Job :503

# of Openings:1

Founded in 1999 in the beautiful Smoky Mountains of East Tennessee, Cadre5 provides innovative technical solutions to our customers locally and nationally. Our Cadre5 Lab Partners division has partnered with the Information Technology Services Directorate (ITSD) at Oak Ridge National Laboratory (ORNL) to recruit a Information System Security Officer. The successful candidate should have a basic understanding of all aspects of cybersecurity.

The candidate will collaborate with other teams across the lab, to include Information Technology, Physical Security, Classification Office, Cybersecurity, Lab Enterprise Risk, Lab Internal Audit, and others as appropriate.

ORNL delivers scientific discoveries and technical breakthroughs needed to realize solutions in energy and national security and provides economic benefit to the nation. This premier research institution located near Knoxville in Oak Ridge, TN, addresses national needs through impactful research and world-leading research centers.

• Working with highly talented team members
• Paid over-time
• Excellent medical insurance, up to 100% paid by employer

The ISSO is a primary stakeholder and facilitator of the continuous monitoring efforts that promote RMF compliance throughout the organization. The ISSO provides direction to IT and infrastructure support personnel on the application of security patches and secure configurations. Routine collaboration and consultation with the ISSM regarding the design, development, integration, and analysis of unclassified information systems. Under general supervision, the candidate is responsible for performing a full range of Information Assurance functions in support of the security needs of the ISSM.

Primary Responsibilities:

• Provide assistance to the ISSM and CISO in the certification and accreditation (C&A) of systems/networks and implementation of cybersecurity requirements and procedures across the client site.
• Ensure systems are operated, maintained, and disposed of in accordance with security policies and procedures and as outlined in applicable System Security Plans (SSPs).
• Perform documented procedures for authorizing users to access information systems.
• Develop and maintain SSPs for system C&A.
• Manage Plans of Action and Milestones to closure for information systems under accreditation.
• Provide guidance on policies and controls to support appropriate levels of risk, facilitate risk tolerance discussions and decisions, and recommend controls based on industry standards and practices. Escalate questions/concerns/issues to more senior-level staff as required.
• Participate in internal/external compliance audits, reviews, self‑assessments, assessments, and data calls.
• Identify, promote, and make recommendations for process improvements.
• Assist with annual self‑inspections, system certification testing, periodic security testing, and functional testing on systems/networks.
• Ensure compliance of all network equipment with applicable DOE and ORNL requirements
• Other duties as assigned for support within the program.

• Bachelor’s degree with 3-5 years of relevant experience (ex. cybersecurity assessments, risk management, cybersecurity policy, and compliance, etc.). An equivalent combination of education and experience may be considered.
• Strong analytical and organizational skills as well as problem solving capabilities to understand Cybersecurity risk and exposure (legal, regulatory violations, etc.) to ORNL.
• Demonstrated experience implementing compliance frameworks (NIST, etc)
• Excellent interpersonal, verbal, written, and presentation communication skills.
• Thorough understanding of industry standards and regulations including NIST 800‑53, NIST Risk Management Framework, and NIST Cybersecurity Framework (CSF).
• Working knowledge of privacy regulations and impacts.
• Ability to work independently, meet deadlines, and uphold high ethical standards.
• This position requires an active Department of Energy "Q" or “L” clearance. A “Top Secret (TS)”…