Cyber Policy Analyst Jobs (NOW HIRING)

Savannah River National Laboratory (SRNL) is seeking an experienced cyber security policy professional to join the Cyber Assurance, Governance, Risk Management and Compliance team! The selected individual will serve as lead policy writer and subject-matter expert for the DOE-SRNL cybersecurity program.     

"We put science to work!" 

Savannah River National Laboratory (SRNL) is a multi-program laboratory applying state of the art science and practical, high-value, cost-effective solutions to complex technical problems to protect the nation. Located at the U.S. Department of Energy's (DOE) Savannah River Site (SRS) in Aiken SC, the laboratory develops and deploys innovative technologies to address some of the nation's environmental, energy, and national security challenges.

Battelle Savannah River Alliance (BSRA) is constantly assessing trends to provide the best possible benefits to our workforce. We also negotiate cost effective premiums that will meet the needs of our evolving workforce. 

Some of the *Benefits offered to employees include:

*Benefits vary based upon employment status

• Highly competitive Medical, Dental, and Vision options including HSA options with company provided seed
• Short- & Long-Term Disability (company paid)
• Life Insurance Non-Contributary 1X salary (company paid)
• AD&D Non-contributary 1x salary (company paid)
• Savings & Investment plan:
• • Qualified Non-Elective Company Contribution of 5% each pay period with immediate vesting
  • Company match 50 cents/dollar up to 8% (5 yrs. vesting in company match)
• Contributory Life Insurance up to 5x Salary with $1M Cap
• Contributory AD&D (employee, spouse and children)
• Paid Time Off
• Employee Assistance Plan
• SRNL offers a competitive relocation package to ease the transition process. Domestic and international relocation assistance is available for certain positions. 

For more information about our benefits, working here, and living here, visit the "About" tab at www.srnl.doe.gov.

BSRA is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or protected veteran status. BSRA is also committed to making our workplace accessible to individuals with disabilities and will provide reasonable accommodations, upon request, for individuals to participate in the application and hiring process. Please email us at SRNLRecruiting@srnl.doe.gov with any questions regarding the hiring process or to request an accommodation.

Minimum Qualifications

• Bachelor's degree in Cybersecurity, Information Management/Assurance, or related field   
• 6 to 9 years of experience in Cybersecurity and Policy in a federal-contractor position  
• Excellent and proven writing skills in the cybersecurity field that show the ability to be clear and concise for complex topics. Samples provided may be redacted if needed. 

• For ability to obtain and maintain a security clearance, US Citizenship is Legally Required.

 Preferred Qualifications

• Expert knowledge of DOE 205.1x and Cyber Security Program Plans 
• Current or recent experience supporting DOE policies related to cybersecurity   
• Good interpersonal skills and demonstrated ability to work collaboratively in a team environment   
• Certifications in Cyber such as CISSP, CISM, CGRC (formerly ISC2 CAP), or CRISC.  
• Policy-focused certifications (GIAC-GLEG, GSLC or similar) 
• Strong attention to detail  
• Ability to learn new technologies, concepts, and processes quickly  
• Active DOE L clearance  

• Serve as principal author for all new and revised SRNL specific cybersecurity policies and procedures
• Develop and maintain responses to contracts for DOE Orders and Cyber Security Program Plan
• Review and advise as to impact to cybersecurity approved policies for other SRNL procedures with cybersecurity references
• Assist ISSOs with creating and maintaining supplemental program documents, policies and procedures for multiple accreditation boundaries based on approved security controls  
• Perform gap analysis for draft, new, or updated federal mandates (EO 14028, BODS, OMB Memos) and write comprehensive summaries that support efficient decision making where needed
• Support audits and assessments with policy evidence artifact/packages
• Review cybersecurity training and develop newly identified training, keeping aligned with approved policies
• Review and advise ISSOs additional documents such as Risk Assessments, Security Impact Analysis or others as requested.
• Work effectively in a team environment and contribute to continuous process improvement efforts.
• Participate/assist with compliance assessments/audits and data calls.  
• Interact with customers and peers in a professional and responsive manner.