Cybersecurity Risk and Compliance Specialist

Idaho National Laboratory is hiring a Cybersecurity Risk and Compliance Specialist to work on our Cybersecurity Information Assurance group team. Our team works a 9x80 schedule located out of our REC facility with every other Friday off.

This position will work with the Cybersecurity Information Assurance program that protects and manages information systems to ensure data confidentiality, accuracy, and accessibility. It includes risk assessments, security measures, threat monitoring, incident response, continuous improvement, and compliance with laws, regulations, and contractual requirements.

Responsibilities Include:

• Establishing IT/Cyber risk management methodology with Cyber Leadership and developing indicators and metrics for technology risks, obligations, and controls.
• Partnering with cybersecurity teams to identify and assess potential cyber and technology-related risks, and coordinating the creation and implementation of risk mitigation strategies.
• Using the integrated risk management platform to monitor and report on the effectiveness of risk management controls and processes, and making recommendations for improvement.
• Coordinating external assessments and maintaining audit findings in DOE's Enterprise Cybersecurity Governance System (ECGS), and submitting corrective actions to the Chief Information Security Officer (CISO) and unclassified Information System Security Manager (ISSM).
• Regularly communicate with audit parties for status updates and deadline reminders.
• Assisting in all cybersecurity efforts, including continuous monitoring, reporting, project team participation, incident management, and supporting the INL Cybersecurity Program.
• Managing BEA's Information Technologies (IT) contractual requirements as the IT requirements management coordinator (IMRC).
• This posting closes: 7/30/25

Minimum Requirements:

• Level 3: Bachelor's degree in related field and 5 years of experience in Cybersecurity, risk management, or government compliance management; or Master's degree in related field and 2 years experience in Cybersecurity, risk management, or government compliance management.
• Level 4: Bachelor's degree in related field and 9 years of experience in Cybersecurity, risk management, or government compliance management; Master's degree in related field and 6 years experience in Cybersecurity, risk management, or government compliance management.
• Experience with National Institute of Standards and Technology (NIST) standards.
• This position requires the ability to obtain and maintain a Department of Energy "Q" clearance, which requires US Citizenship.

Job Information:

• The pay range for this position is: Level 3 ($77,628 - $159,228) / Level 4 ($93,204 - $191,076). At Idaho National Laboratory compensation decisions are determined using factors such as education, relevant experience, and other credentials.
• TDP: This is a testing designated position; you will be required to submit to a pre-employment drug screen and periodic drug testing throughout the term of your employment.
• Multi-Level: This is a multi-level posting and you will be placed at the appropriate level dependent on depth and breadth of proven experience and skills.

Physical Requirements

While performing the duties of this classification, the employee is frequently required to stand, walk, sit, stoop, kneel,
bend, use hands to handle materials, manipulate tools, keyboard and type, reach with hands and arms, and operate jobrelated equipment. The employee must occasionally lift and/or move up to 30 pounds. Sufficient visual acuity and
hearing capacity to perform the essential functions and interact with people is required. Reasonable accommodations
may be made to enable individuals with disabilities to perform the essential functions.

Benefits and Relocation

• Medical, Dental, Vision, and Flexible Spending Accounts
• 401(k) with a 4.2% employer contribution and up to 4.8% match
• Paid time off (personal leave)
• Employee Education Program (tuition assistance)
• Comprehensive Relocation Package
• Benefit eligibility subject multiple factors, including employment status and position classification.

INL is a science-based, applied engineering national laboratory dedicated to supporting the U.S. Department of Energy's mission in nuclear energy research, science, and national defense. With more than 5,000 scientists, researchers, and support staff, the laboratory works with national and international governments, universities and industry partners to discover new science and development technologies that underpin the nation's nuclear and renewable energy, national security, and environmental missions.

INL Mission
Our mission is to discover, demonstrate and secure innovative nuclear energy solutions, other clean energy options and critical infrastructure.

INL Vision
Our vision is to change the world's energy future and secure our nation's critical infrastructure.

Selective Service Requirements
To be eligible for employment at INL males born after December 31, 1959 must have registered with the Selective Service System (SSS). For more information see www.sss.gov.

Equal Employment Opportunity
Idaho National Laboratory (INL) is an Equal Employment Opportunity (EEO) employer. It is the policy of INL to provide equal employment opportunities to all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information.

Reasonable Accommodation
We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Other Information
When applying to positions please provide a resume and answer all questions on the following screens. Applicants, who fail to provide a resume or answer the questions, may be deemed ineligible for consideration.

INL does not accept resumes from third party vendors unsolicited.