Deputy CISO

Description

Leidos is seeking a Deputy Cyber Chief Information Security Officer (DCISO) in Oak Ridge TN, to support a Leidos joint venture, Consolidated Nuclear Security, LLC (CNS). Remote work options are not available.

About CNS:Leidos is a member company of the joint venture Consolidated Nuclear Security, LLC (CNS). CNS manages and operates the Y-12 National Security Complex in Tennessee under a single contract from the U.S. Department of Energy/NNSA. Y-12 helps ensure a safe and effective U.S. nuclear weapons deterrent by retrieving and storing nuclear materials, fueling the nation's naval reactors, and performing complementary work for other government and private-sector entities. Y-12 is our nation's Uranium Center of Excellence.

Must be able to obtain/maintain a DOE Q clearance. Preference will be given to those who possess a current DOE Q or Top Secret clearance.

What You'll Do

The Deputy Chief Information Security Officer (DCISO) is responsible for the assisting the Chief Information Security Officer (CISO) in overseeing the Cybersecurity Organization. This organization consists of the Operations Team, Authorization Team, and several direct staff. This person will assist the CISO in the management, training, mentoring and performance monitoring of CISO staff as well as other duties as assigned. The DCISO will report to the Chief Information Security Officer (CISO) and will work with the Authorization Manager, Operations Manager and other Cybersecurity Staff to manage the CNS Cybersecurity Program. Additionally, this person may serve as an Alternate Information System Security Manager (A-ISSM), assisting the primary ISSM in delegated duties. This position is expected to have an understanding of the NIST Risk Management Framework (RMF), Cybersecurity technical principles and the various supporting elements.

Specific Job Responsibilities

• Serve as the alternate cybersecurity lead for the Y-12 National Security Complex Ensure risk-balanced security measures are integrated into IT projects and activities
• Maintain an understanding of current and emerging cyber threats at all times, and make recommendations for mitigation to the CISO/CIO
• Assist in the development, ongoing improvement and maintenance of the CNS cyber security architecture Work in partnership with other IS&S managers in the development, implementation and operation of a Security Operations Center
• Manage compliance activities to support the contractor assurance program (i.e., patching and mitigation actions to resolve vulnerability scans)
• Work with CISO to establish cyber metrics to gauge program effectiveness and perform internal audits and assessments and to establish policies and procedures to ensure appropriate cyber controls and monitoring are in place to ensure the confidentiality, integrity, and availability of CNS and NNSA information
• Support the CIO, CISO, and other cyber security personnel to ensure implementation of the cyber security program remains in compliance with DOE/NNSA and NIST requirements
• Establish and maintain a strong external network of cyber contacts to ensure threat information and best practices are incorporated into the CNS cyber security program
• Work cooperatively with external parties such as DOE-CIRC, JC3, DHS, CI, intelligence organizations, and others as appropriate to help improve the CNS cyber program and security capabilities Work with CISO to plan, prepare, and devise work plans that ensure cyber efforts are conducted within approved budget and schedule parameters while implementing IS&S project management processes
• Maintain a strong understanding of mission needs and use cases so that risk management and cyber operations activities effectively support the CNS mission and program direction while managing risk in a balanced manner
• Maintain communications efforts with the Nuclear Production Office (NPO) federal customer on matters pertaining to cyber security and incident response Ensures all CNS systems have an approved Authority to Operate (ATO) from NPO

What You Can Expect

• Meaningful work and unique opportunities to support missions vital to national and global security
• Top-notch, dedicated colleagues Generous pay and benefits with a stable organization
• Career advancement and professional development programs
• Work-life balance fostered through flexible work options and wellness initiatives

Minimum Job Requirements

• Bachelor's degree: Minimum 12 years of relevant experience with minimum 5 years of supervisory/management experience.
• Twenty or more years of relevant education, training, and/or progressive experience may be considered to satisfy educational and years-of-experience to meet the requirements for this posting.
• Minimum 5 years supervisory/management experience.

Preferred Job Requirements

• Advanced Degree in information technology, engineering, or related field CISSP, CPT, CHFI, and/or CCNP certifications desired but not required
• Experience in coordinating sophisticated incident response from attacks by APT actors Knowledge of Risk Management Framework (NIST SP 800-37 and SP 800-39)
• Familiarity with business process re-engineering to include Six Sigma and/or Lean techniques Familiarity with utilizing electronic Governance, Risk, and Compliance (eGRC) systems Experience with establishing and maturing enterprise risk management frameworks Experience leading self-assessments and supporting external audit activities
• Familiarity with current application models, data analytics, cloud services, and mobility
• Experience in federal program management to include financial budgeting, resource management and execution, reporting, and procurements
• Continuous improvement and feedback for existing processes
• Strong foundation in and in-depth technical knowledge of security engineering, computer and network security, authentication, and security controls
• Knowledge of the ITIL framework Experience in project management with PMP certification desired but not required
• Familiarity with DOE Cyber Security program and requirements
• Familiarity with the security development lifecycle for custom software
• Familiarity with supporting and enabling the DOE/NNSA mission

Why Y-12?

You get #morethanajob. We encourage employees to achieve a healthy personal balance among home, work and the community. One of the ways we embrace work-life balance is by offering flexible work arrangements that provide alternatives to the traditional workweek, while still meeting business needs. Top talent and personal commitment mean more to our success than any other factors, so we reward our people with the kinds of benefits that make a positive difference in the quality of their lives. Benefits such as: medical plan, prescription drug plan, vision plan, dental plan, employer matched 401(k) savings plan, disability coverage, education reimbursement and many more. Want to stay healthy and fit but hate the cost of a gym membership? Take advantage of one of our onsite workout facilities and eat healthy in our onsite cafeterias. Much more than a workplace, at Y-12, you can build a career that lasts a lifetime

Notes The minimum education and experience for the lowest career level in the job posting range are listed under Minimum Job Requirements. Successful candidates hired into a higher career level than the minimum in the range must meet the requirements listed in the job leveling charts for the career level into which they are being hired.

Requires a Q clearance; however all qualified candidates will be considered regardless of their current clearance status. The ability to obtain and maintain a Department of Energy Q clearance is required.

This position may require entry into the Material Access Areas (MAA) and participation in the Human Reliability Program (10 C.F.R. Part 712), which requires successful competition of a DOE counterintelligence evaluation and may include a counterintelligence-scope polygraph examination.

This position may be categorized as a "designated position" identified by 10 C.F.R. Part 709, requiring successful completion of a DOE counterintelligence evaluation that may include a counterintelligence-scope polygraph

examination.

CNS is a drug-free workplace. Candidates accepting a job offer will be required to pass a pre-placement physical, drug screening and background investigation. As an employee, you may be required to receive and maintain a security clearance from the United States Department of Energy in order to meet eligibility requirements for access to sensitive information or matter. U.S. citizenship is a requirement for security clearance applicants. All employees are subject to being randomly selected for drug testing without advance notification. CNS is an equal opportunity employer. All qualified applicants will receive consideration for employment based on merit and without regard to race, color, religion, sex, sexual orientation, national origin, protected veteran status or disability

Targeted Salary Range: $180,941 - $282, 720

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

Securing Your Data

Beware of fake employment opportunities using Leidos' name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.