Cybersecurity Controls & Compliance Analyst (Oak Ridge)

This position supports the U.S. Department of Energy Office of Scientific and Technical Information (DOE OSTI) in its mission to ensure the long-term preservation and accessibility of DOE scientific and technical information. The role focuses on assessing cybersecurity controls, supporting audit readiness, and ensuring compliance with federal cybersecurity frameworks and OSTIs internal policies. This role is primarily focused on compliance and documentation rather than hands-on technical work. This is onsite in Oak Ridge, TN. US citizenship is required to obtain a badge.

We are not accepting agency, 1099, or C2C inquiries

Position-Specific Duties

• Evaluate and document the effectiveness of cybersecurity controls across OSTIs network and systems.
• Support internal and external audits, including evidence collection, control mapping, and remediation tracking.
• Support and partner with stakeholders in conducting risk assessments and gap analyses to ensure alignment with NIST, FISMA, and DOE cybersecurity requirements.
• Collaborate with system owners and technical teams to ensure security controls are implemented and maintained.
• Monitor compliance with OSTIs cybersecurity policies, procedures, and standards.
• Maintain and update system security plans (SSPs), risk registers, and control documentation.
• Assist in the development and refinement of cybersecurity governance processes.
• Analyze security event data to identify control weaknesses and recommend improvements.
• Support the implementation of continuous monitoring strategies and reporting mechanisms.

Qualifications :

Education, Training, Experience

Knowledge, Skills, Abilities