BNL's Information Technology Division is seeking an information technology professional for a growth opportunity as a member of its Cybersecurity Compliance team. This individual’s primary responsibility will be to participate in the planning and conducting of independent comprehensive assessments of the security controls employed by BNL information systems in accordance with NIST SP 800-53a and other relevant guidance. Other responsibilities will include assisting the CISO and senior compliance staff in maintaining ATO documentation and performing other as-needed compliance-related tasks. This is a full-time position with potential for remote work.

Essential Duties and Responsibilities:

• Under the guidance of senior compliance staff, execute detailed Security Assessment Plans including contributing to the development of assessment methods appropriate to the desired level of assurance.

• Collect assessment evidence, working with various stakeholders as necessary and performing interviews of information system staff and users.

• Evaluate systems and assessment evidence, engaging subject matter experts as necessary, to determine whether controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security and privacy requirements of the system and the organization.

• Contribute to comprehensive Security Assessment Reports detailing your assessment findings, providing an accurate technical evaluation of the system's security posture, clearly describing any identified deviations and/or weaknesses.

• Assist the CISO and senior Cybersecurity Compliance staff in maintaining Information System assurance and accreditation materials, and monitoring and measuring risk, compliance and assurance efforts.

• Participate in validation of POA&M closure steps.

• Assist senior Cybersecurity Compliance staff in developing an annual assessment schedule.

• Actively contribute to the continuous evaluation and improvement of the Cybersecurity Compliance program.

Required Knowledge, Skills, and Abilities:

• Bachelor’s degree in computer science, cyber security, or a related field, or sufficient experience in information technology or other field that would provide the same basic knowledge

• Understanding of basic technical concepts and technologies and their application.

• Demonstrated research, problem solving, and critical thinking skills.

• Ability to analyze systems and technologies and identify weaknesses.

• Ability to work both independently and in a team.

• Emotional intelligence and the ability to build productive working relationships.

• Excellent attention to detail.

• Motivation and capacity to learn quickly and grow Cybersecurity Compliance skill set through on-the-job and formal training, and self-study.

• Exceptional interpersonal, oral and written communication skills suitable for both technical and non-technical audiences.

• Proficiency with core MS Office applications including Outlook, Word, and Excel.

• Ability to work a standard 40-hour week (M-F 8:30AM to 5:00PM EST).

• Remote candidates must have a private, secure workspace.

Preferred Knowledge, Skills, and Abilities:

• 1 + years of relevant experience

• CompTIA Security+, A+ and/or other certifications demonstrating a basic understanding of relevant concepts and technologies.

• Experience executing Security Control Assessments and drafting and delivering Security Assessment Reports

• Experience with multiple operating systems (e.g., Windows, Linux, Macintosh).

• Experience working in a research environment.

• Knowledge of Operational Technology (OT) and embedded systems.

• Experience in a complex computing environment.

Compensation:

• Brookhaven Laboratory is committed to providing fair, equitable and competitive compensation. This is a multi-level role and the full salary range for this position is $61950 - $117950 / year. You will be placed at the level and salary commensurate with your experience.  Salary offers will be commensurate with the final candidate’s qualification, education and experience and considered with the internal peer group.

Other Information:

• Candidates must be capable of obtaining security clearance.

• Visa Sponsorship is not available for this position