Senior Cyber Risk & GRC Leader – Nuclear Sector

INPO; Atlanta (GA); On-site; USD 125,000 - 160,000; Full time

Job summary

INPO seeks a Senior IT Security Analyst to mature and steward the organization’s cybersecurity program in the nuclear sector. You will translate complex risk into actionable steps for executives and drive governance, controls, and reporting aligned with NIST, DOE/NRC and ISO requirements.

You will oversee audits, risk registers, third‑party risk, and vulnerability management tooling while communicating risk to the CFO and senior leadership. This role is central to INPO's security strategy.

Qualifications

• Six or more years of professional work experience.
• Four or more years of experience in risk management, audit, or cybersecurity governance in regulated industries.
• Nuclear industry or critical infrastructure experience preferred.
• Third-party risk management including vendor assessments and supply chain risk analysis.
• Executive reporting and stakeholder management with C-suite knowledge.

Responsibilities

• Matures INPO's cybersecurity program; align governance, controls, and reporting with recognized frameworks.
• Maintain IT security policies, standards, and procedures to meet DOE/NRC/ISO requirements.
• Manage IT risk register and drive consistent risk identification, analysis and remediation.
• Translate risks into executive insights for prioritization and investment decisions.
• Coordinate audits, assessments, and remediation; drive continuous compliance.
• Produce monthly risk posture metrics and quarterly trend reports.

Skills

Cybersecurity risk management

Executive communication

Regulatory compliance

Risk assessment

Vendor risk management

Education

High School Diploma or GED

Bachelor's degree in cybersecurity / IT / CS

CRISC

CISM

CISSP

Tools

Qualys

ServiceNow GRC

X-Analytics

SOC/MDR

Job description

INPO seeks a Senior IT Security Analyst to mature and steward the organization’s cybersecurity program in the nuclear sector. You will translate complex risk into actionable steps for executives and drive governance, controls, and reporting aligned with NIST, DOE/NRC and ISO requirements.

You will oversee audits, risk registers, third‑party risk, and vulnerability management tooling while communicating risk to the CFO and senior leadership. This role is central to INPO's security strategy.