Senior Cyber Risk & Compliance Strategist

Institute of Nuclear Power Operations (INPO); Atlanta (GA); On-site; USD 120,000 - 180,000; Full time

Job summary

Institute of Nuclear Power Operations (INPO) seeks a Senior IT Security Analyst to lead cybersecurity risk governance and maturity across governance, controls, and reporting. The role translates complex regulatory and technical risks into actionable priorities for the CFO, IT Director, and senior leadership.

You will mature INPO's cybersecurity program in alignment with DOE/DOC/NRC/ISO requirements, manage risk registers, and drive remediation across audits, third‑party risk, and security

Qualifications

• Minimum 6 years of professional work experience.
• 4+ years in risk management, audit, or cybersecurity governance in regulated industries.
• Nuclear or critical infrastructure regulatory compliance experience preferred.

Responsibilities

• Matures INPO's cybersecurity program, aligning governance, controls, and reporting with NIST CSF 2.0 and NIST AI RMF.
• Maintains IT risk register and applies assessment methods to drive mitigation tracking.
• Translates risks into executive insights for prioritization and leadership decisions.
• Produces monthly risk metrics and quarterly risk posture reports.
• Oversees third‑party risk across SaaS and supply chain to meet contractual obligations.
• Coordinates IT audits, regulatory examinations, and security testing; drives remediation.

Skills

IT risk mgmt

Cybersecurity frameworks

Regulatory compliance

Executive communication

Cross-functional leadership

Vendor risk mgmt

Education

High School Diploma / GED

Bachelor's in cybersecurity

CRISC

CISM

CISSP

Tools

Qualys

ServiceNow GRC

X-Analytics

Job description

Institute of Nuclear Power Operations (INPO) seeks a Senior IT Security Analyst to lead cybersecurity risk governance and maturity across governance, controls, and reporting. The role translates complex regulatory and technical risks into actionable priorities for the CFO, IT Director, and senior leadership.

You will mature INPO's cybersecurity program in alignment with DOE/DOC/NRC/ISO requirements, manage risk registers, and drive remediation across audits, third‑party risk, and security