Cybersecurity Risk Assurance and Policy Analyst

Company Description

• Apply National Institute of Standards and Technology (NIST) standards and FedRAMP requirements to cyber security assessments using Risk Management Framework (RMF).
• Lead the CSP Risk Assessment functions within the umbrella of the CSP RMF.
• Assess and quantify cyber security risks and take appropriate actions, including analyzing, interpreting, and applying cyber security processes, procedures and policies for efficiency, accuracy, and compliance with Federal requirements.
• Develop and manage policies, schedule, coordinate projects; interact with other LLNL organizations to ensure consistency between Cyber Security policy and requirements of other LLNL organizations (e.g., Supply Chain Management, Safeguards and Security, etc.).
• Develop annual self-assessment plan with CSP, coordinate CSP assessments with the Management Assurance System (MAS) and administer self-assessments; create, document, monitor and track issues and corrective action plans in the institutional tracking system for CSP.
• Design and execute project plans, meetings, metric gathering, and analyze data, to report results, which includes researching, analyzing, and recommending risk strategies for cyber-related projects.
• Provide guidance to organizations and customers on policies, requirements, information resources, and development of a common solution. Coordinate and lead working groups with Programs, Safeguards and Security, LivIT and O&B elements as CSP lead for various institutional and programmatic activities.
• Respond to data calls and external auditors.
• Promote and support plans to promote diversity, equity, and inclusion within the program.
• Perform other duties as assigned.

• Provide advanced technical assistance, training, and/or mentoring to others in area of cyber security.
• Collaborate in the development of new processes and serve as a primary technical point of contact with sponsors and stakeholders.

• Ability to secure and maintain a U.S. DOE Q-level security clearance which requires U.S. citizenship
• Bachelor's degree in a related field or equivalent combination of education and technical training in a security discipline(s) and related experience.
• Broad experience assessing and quantifying cyber security risks, utilizing analytical and research skills effectively to develop solutions.
• Comprehensive analytical, problem-solving, and decision-making skills to develop creative solutions to complex problems.
• Effective interpersonal skills necessary to collaborate, negotiate and influence all levels of personnel.
• Proficient verbal and written communication skills necessary to collaborate in a team environment and document, present and explain technical information.
• Demonstrated ability to manage concurrent technical tasks with conflicting priorities.

• Significant experience managing multiple concurrent tasks and priorities of customers and stakeholders to ensure milestones are met.
• Advanced analytical, problem-solving, and decision-making skills to develop creative solutions to complex problems.
• Advanced knowledge of cybersecurity policies and compliance with Federal requirements.

• Master's degree in related field.
• Knowledge of cyber security risk management requirements.
• Knowledge of LLNL's Cyber Security policies, processes, and requirements.

• Flexible Benefits Package
• 401(k)
• Relocation Assistance
• Education Reimbursement Program
• Flexible schedules (depending on project needs)
• Inclusion, Diversity, Equity and Accountability (IDEA) - visit https://www.llnl.gov/diversity
• Our core beliefs - visit https://www.llnl.gov/diversity/our-values
• Employee engagement - visit https://www.llnl.gov/diversity/employee-engagement