ETC - IT/Security

Urenco; Eunice (NM); On-site; USD 110,000 - 135,000; Full time

Job summary

ETC US, located at the Urenco USA facility in Eunice, NM, seeks an IT Security Specialist to maintain information security policies, standards and guidelines per corporate NRC/DOE requirements. You will manage risk, perform assessments, and support on-site IT tasks while collaborating with the Corporate ETC IT team.

Minimum qualifications include a CS degree and 3+ years in IT security; preferred are 5+ years and familiarity with NRC/DOE/NIST requirements. Travel up to 10% may be required.

Qualifications

• Bachelor’s degree in Computer Science or equivalent; IT security experience can substitute.
• 3+ years’ experience in managing information systems and system security.
• Experience with networking equipment, Windows OS, TCP/IP, Oracle, UNIX and SQL.

Responsibilities

• Promote the ETC Safety Improvement Plan in the workplace.
• Maintain a risk and control framework aligned to IT security policy and standards.
• Use regulatory risk assessment methodologies to identify risks and improvements.
• Provide information assurance per DOE/NIST risk management framework.
• Achieve and maintain full DOE accreditation for all classified systems.
• Prepare and review ISSPs, network diagrams, procedures, and changes.
• Conduct periodic tests and analyze results to drive improvements.
• Provide security guidance across the system lifecycle for ETC USA.
• Conduct security reviews to protect data integrity and prevent breaches.
• Identify vulnerabilities and guide risk mitigation for classified systems.
• Understand Information Security Standard ISO 27001.
• Ensure personal data processing complies with regulations.
• Develop, maintain and deliver user security training.
• Maintain inventory of software and hardware for the network.
• Support users with hardware/software issues in the classified network.
• Generate condition reports and document issues in corrective actions.
• Coordinate between ETC USA IT and ETC IT to enforce group policy.
• Troubleshoot with ETC IT Corporate for system repairs.
• Ensure data is recoverable and regularly backed up.
• Adhere to all regulations, policies, procedures and instructions.

Skills

IT Security

Networking

Windows OS

TCP/IP

Oracle

UNIX

SQL

Education

Bachelor's degree in Computer Science

Job description

Summary of Responsibilities

The IT Security Specialist is responsible for the maintenance and implementation of the Enrichment Technology US, Inc. (ETC USA) information security policies, procedures, standards, and guidelines. The IT Security Specialist is also responsible for the management of information security processes for ETC USA activities in line with the corporate policies of Enrichment Technology Company Ltd. (ETC) and in compliance with risk; management based regulatory requirements as set forth by the Nuclear Regulatory Commission (NRC) and Department of Energy (DOE). This role also supports IT tasks including maintenance, troubleshooting, and repair of general IT related issues. This position will work directly with the Corporate ETC IT team to address and solve general on-site issues. In the absence of the Facility Security Officer (FSO), may serve as the interim FSO.

Education and Experience

Minimum Qualifications

• Bachelor’s degree in Computer Science or equivalent. Experience in IT Security and IT systems can be considered in lieu of formal education
• 3+ years’ of experience in managing information systems and system security
• Must have experience in working with networking equipment, Microsoft Windows Operating systems and must have experience with TCO/IP, Oracle, UNIX, and SQL

Preferred Qualifications

• 5+ years’ experience in managing information systems and system security
• Knowledge of and familiarity with federal requirements (NRC, DOE, NIST) for Information Systems Security

Job Details

• The work location for this position is with ETC at the Urenco USA facility in Eunice, NM
• Security Requirement: CAA Access; Q level security clearance
• Work Schedule: Professional work schedule with minimal night/weekend support as determined by supervisor/manager, generally Monday through Fridays. Some night and weekend work maybe required. Employees may be subject to call outs based on business needs.
• Travel: Yes; 10% or less/or as required
• Work Environment: This job operates in a professional office environment with some potential for radiological exposure expectations of < 100mrem/year. General office, plant/production with low light, confined spaces, near moving parts, radiation, risk of electrical shock, chemicals, vibration, outdoor with extreme cold, heat, wet or dry conditions. This role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets, etc.

Primary Functions

• Promote the ETC Safety Improvement Plan in the workplace
• Maintain a risk and control framework that actually reflects the IT control environment and alignment to the information security policy and standards.
• Use regulatory prescribed risk assessment methodologies to identify risks and opportunities to strengthening control.
• Provide information assurance and information security based on the risk management framework as set forth by the DOE, comparable to the framework of the National Institute of Standards and Technology (NIST).
• Achieve and maintain full system accreditation by the DOE as the Designated Accreditation Authority (DAA), for all classified systems within ETC USA.
• Prepare and reviewing Certification and Accreditation packages (ISSP's, network diagrams, procedures, etc. and changes thereto) for the ETC USA information systems.
• Conduct periodic tests of the information systems and analyzing the test results to evaluate for the need of corrective of strengthening action of the information infrastructure.
• Provide information, security support and technical security guidance in all phases of the lifecycle of the accredited systems at ETC USA.
• Perform testing and conduct quarterly and/or annual security reviews to assure the data integrity of the ETC USA systems, to prevent data loss and to prevent compromise of classified information due to intrusions or other activity.
• Identify security vulnerabilities and provide guidance on how to mitigate risks to the ETC USA classified and accredited systems.
• Good understanding of Information Security Standard ISO 27001.
• Supervise that personal data is processed accordance with national and international statutory regulations.
• Able to solve weaknesses discovered from information security incidents and findings during audits and inspections.
• Develop, maintain and provide user training.
• Ensure troubleshooting, repairs, testing and maintenance for classified networks and equipment are performed as per approved plans.
• Establish and maintain an up-to-date software and hardware inventory for the accredited network and systems.
• Provide support to users relating to both hardware and software problems on their workstations enclosed in the classified network.
• Generate condition reports (CR) to document noted problems whether the issues are in security or elsewhere.
• Document all concerns in the ETC USA corrective action program.
• Maintain computer network documentation; update computer maintenance manuals.
• Act as the link between ETC USA IT function and ETC IT to ensure the company adheres to group policy.
• Working with the ETC IT Corporate team, perform troubleshooting and repairs of IT systems.
• Maintain computer network documentation; update computer maintenance manuals.
• Ensure system and end user data is recoverable and backed up on a regular basis
• Confirm with and abide by all regulations, policies, work procedures, and instructions

The duties and responsibilities listed above do not reflect the position description in full and in complete detail.

Benefits

Please note that we continually evaluate our plans and make adjustments as necessary to meet market and business requirements.

Compensation starting at: $110000 - $135000 / year and up dependent on candidate.

ETC US provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. ETC US encourages minorities, females, veterans and persons with disabilities to apply. ETC US supports a drug free environment.

If reasonable accommodation is needed to participate in the job application, interview process, and/or to perform essential job functions, please contact ETC HR [e-mail].

Enrich your future!

ETC US | Human Resources |[e-mail]