Industrial Cyber Security Consultant

Entergy - Saint Francisville, LA

Full-time - Mid Level

Saint Francisville, LA

Utilities

About the position

The Industrial Cyber Security Consultant role at Entergy Services, LLC is focused on ensuring compliance with Cyber Security regulations across Entergy Nuclear Sites. This position serves as a technical compliance subject matter expert, leading the development and application of Cyber Security standards and procedures. The consultant will support various Cyber Security activities, including the design, implementation, maintenance, auditing, and inspection of Cyber Security controls, while interfacing with regulatory bodies and industry initiatives.

Responsibilities

• Provides Cyber Security Program level support for training, planning, guidance, and direction of the Nuclear Cyber Security Program.
• Supports the analysis, implementation, testing, troubleshooting, and documentation of cyber security controls for critical components and systems at the nuclear plants.
• Provides planning, guidance, and operational support for the site cyber security infrastructure including SIEMS, vulnerability and compliance scanners, networking components, servers, and workstations.
• Reviews the analysis of cyber security controls and recommends solutions to reduce the risk of cyber security sabotage to the nuclear plant and Entergy infrastructure.
• Oversees and directs the implementation and change management of procedures and plans required to ensure nuclear sites adhere to the 10CFR73.54 cyber security regulations.
• Plans and reviews periodic assessments, benchmarks, and tabletops of the Cyber Security Program.
• Supports internal and external parties in the audits and NRC inspections of the Cyber Security Program.
• Leads and reviews the analysis of incident response policies, takes an active role in cyber incident response and recovery, and performs risk assessments on new and existing computer systems and equipment.
• Develops and maintains a thorough knowledge of 10 CFR 73.54, NEI -08-09, site Cyber Security Plan, and cyber security defense-in-depth protective strategy.
• Assists in the development of technical bases for License Amendment Requests and 10 CFR 50.54(p) evaluations.
• Participates, organizes, and leads fleet peer group activities to ensure alignment across the nuclear fleet.
• Interfaces with other internal departments such as the IT Security and Compliance group and the Chief Security Office.

Requirements

• Bachelor's Degree in Information Technology, Cyber Security, Engineering, or equivalent experience.
• 4 years of experience in Cyber Security with an electric power generation utility, previous nuclear power experience, or other industrial environment.
• Experience in implementing security control policy and procedures.
• Experience working with regulatory bodies associated with cyber security compliance.
• Knowledge of system hardening, threat and vulnerability management, patch management, and configuration management.
• Knowledge of security controls testing, security audits, and security assessments.
• Knowledge and understanding of NIST controls.