Nuclear GRC Cybersecurity Engineer

Position: Nuclear GRC Cybersecurity Engineer

Salary Range: Level III : $125,000 to $142,500

Benefits: Robust benefits package that includes a 401K plan with %5 employer match, Annual Merit Increase, Annual COLA increase, Annual Short-Term Bonus, Annual Long-Term Bonus, Medical/Dental /Vision Insurance, Life and Disability Insurance, 20 days’ universal leave, 11 paid holidays

Location: Oak Ridge, TN / Hybrid

Relocation Assistance : financial relocation assistance available for qualified candidates

Hours: 8:00am-5:00pm Monday through Friday

Travel Expectations: potential 10% to plant sites or home office

Job Description:

Nuclear GRC experience is required for this role. This position is responsible for implementing and maintaining cybersecurity Governance, Risk, and Compliance (GRC) practices in support of nuclear facility design and engineering, with a focus on the Xe-100 advanced nuclear reactor. The role integrates cybersecurity requirements, risk management, and regulatory compliance into the design, development, and assessment of plant Information Technology (IT) and Operational Technology (OT) systems. The successful candidate will apply knowledge of nuclear industry cybersecurity requirements and regulatory frameworks to support cybersecurity assessments, identify and mitigate risks, evaluate compliance with applicable standards, and collaborate with plant design and engineering teams to ensure cybersecurity controls are incorporated throughout the plant lifecycle.

Job Minimum Qualifications:

• High school diploma or equivalent.
• Typically, five years of experience in a Cybersecurity role are required.
• Experience with GRC in a regulated nuclear environment is required.
• Establishing security responsibilities.
• Managing cybersecurity programs.
• Ensuring leadership understands security risks.
• Identifying vulnerabilities in computer systems.
• Assessing risks to operational technology (OT).
• Evaluating third-party/vendor security risks.
• Developing mitigation plans.
• Preparing for regulatory audits.
• Maintaining compliance documentation.
• Demonstrating that security controls are operating effectively.
• Tracking and correcting compliance deficiencies.
• Knowledge of ServiceNow platform capabilities, modules, and best practices.
• Familiarity with ITIL processes and service management principles.
• Technical skills, including scripting, workflow configuration, and business rule development.