Savannah River National Laboratory
SRNL Cyber Security Analyst (ISSO)
Savannah River National Laboratory, Aiken, South Carolina, United States, 29805
We are seeking experienced Cyber Security Analysts to join our dynamic and growing team. The selected candidate will serve as an Information Systems Security Officer (ISSO) on the SRNL Information Assurance team. The successful candidate should have a basic understanding of all aspects of cybersecurity.
About the role:
* Assist the Information Systems Security Manager (ISSM) in the certification and accreditation (C&A) of systems/networks, implementation of the Risk Management Framework (RMF), and cybersecurity requirements and procedures across SRNL.
* Ensure systems are operated, maintained, and disposed of in accordance with DOE/NNSA security policies and procedures and as outlined in applicable System Security Plans (SSPs).
* Develop and maintain System Security Plans.
* Identify, review, and provide analysis and recommendations to meet requirements of applicable laws, regulations, orders, and contracts, aligning with business objectives.
* Providing guidance on policies and security controls to support appropriate levels of risk, facilitate risk tolerance discussions and decisions, and recommend controls based on industry standards and practices.
* Participating in internal/external compliance audits, reviews, self-assessments, and data calls.
About the role:
* Assist the Information Systems Security Manager (ISSM) in the certification and accreditation (C&A) of systems/networks, implementation of the Risk Management Framework (RMF), and cybersecurity requirements and procedures across SRNL.
* Ensure systems are operated, maintained, and disposed of in accordance with DOE/NNSA security policies and procedures and as outlined in applicable System Security Plans (SSPs).
* Develop and maintain System Security Plans.
* Identify, review, and provide analysis and recommendations to meet requirements of applicable laws, regulations, orders, and contracts, aligning with business objectives.
* Providing guidance on policies and security controls to support appropriate levels of risk, facilitate risk tolerance discussions and decisions, and recommend controls based on industry standards and practices.
* Participating in internal/external compliance audits, reviews, self-assessments, and data calls.