GRC CareersAGJ, the AI governance job boardPost a Job

Jobs › Information Technology Cybersecurity Specialist

Information Technology Cybersecurity Specialist

Department of Energy Headquarters

Job at a glance

Category
GRC
Work arrangement
On-site
Location
Richland, Washington
Salary range
$106,437 to $163,514
Posted
Nov 13, 2026
Closes
November 19, 2026, at 11:59 p.m. Eastern Time
Apply for this jobApplications go directly to Department of Energy Headquarters
Applying today? Most GRC roles fill fast. Get the next ones the day they post, in Richland, Washington.

Free. One click to unsubscribe. We never share your address.

ShareEmailLinkedInXFacebookPrint / Save PDFCopy link

Department of Energy Headquarters is hiring a Information Technology Cybersecurity Specialist in Richland, Washington. This is a GRC job in the governance, risk, and compliance field, with a posted range of $106,437 to $163,514. Review the full details below and apply directly with Department of Energy Headquarters.

This position is part of the Office of Science - Pacific Northwest Site Office, Department of Energy. As a Information Technology Cybersecurity Specialist, you serve as an Information Technology Specialist within the Mission Integration and Projects Division for the Office of Science (SC), Pacific Northwest Site Office.

Qualifications: BASIC REQUIREMENT: Applicants must have IT-related education and experience demonstrating each of the four competencies listed below at a proficiency level equivalent to the next lower grade level in federal service. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. GS-13 SPECIALIZED EXPERIENCE REQUIREMENTS: A qualified candidate's online application and resume must demonstrate at least one year of specialized experience equivalent to the next lower grade level GS-12 in the Federal service. Specialized experience for this position is defined as meeting 2 of 3 of the following: Evaluating information technology systems, applications, or networks against cybersecurity standards to identify vulnerabilities, assess risk, and recommend corrective actions. Managing system security authorization or accreditation packages, including developing security plans, and tracking remediation activities. Providing technical guidance to management and system owners on implementing cybersecurity policies, risk management frameworks, or operational safeguards. GS-14 SPECIALIZED EXPERIENCE REQUIREMENTS: A qualified candidate's online application and resume must demonstrate at least one year of specialized experience equivalent to the next lower grade level GS-13 in the Federal service. Specialized experience for this position is defined as meeting ALL of the following: Evaluating information technology systems, applications, or networks against cybersecurity standards to identify vulnerabilities, assess risk, and recommend corrective actions. Managing system security authorization or accreditation packages, including developing security plans, and tracking remediation activities. Providing technical guidance to management and system owners on implementing cybersecurity policies, risk management frameworks, or operational safeguards. "Experience" refers to paid and unpaid experience. Examples of qualifying unpaid experience may include: volunteer work done through National Service programs (such as Peace Corps and AmeriCorps); as well as work for other community-based philanthropic and social organizations. Volunteer work helps build critical competencies, knowledge, and skills; and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. CTAP/ICTAP candidates: To be considered "well qualified" you must meet all of the requirements as described in this section. You must meet all qualifications and eligibility requirements by the closing date of this announcement.

Full responsibilities and requirements are on Department of Energy Headquarters's application page.

Apply for this job →
About Department of Energy Headquarters
Hiring for governance, risk, and compliance jobs on GRC Careers.
Search all Department of Energy Headquarters jobs →

Location and market context

This job is based in Richland, Washington on-site. Local candidates benefit from being close to Department of Energy Headquarters's teams and regional hiring market. Confirm the exact in-office expectation and any relocation support with the employer.

About cybersecurity governance jobs

Cybersecurity governance connects security control frameworks to business and regulatory risk, covering policy, risk assessment, and control assurance rather than hands-on operations. Jobs like this one are typically evaluated against frameworks such as NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices.

How to position yourself for this cybersecurity governance job

Strong candidates emphasize security control frameworks, risk assessment, policy and standards, and translating technical security posture into governance and board-level reporting. In your resume and outreach, tie your experience to how Department of Energy Headquarters would apply NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices, and lead with concrete outcomes rather than duties.

Similar GRC jobs

IT CYBERSECURITY SPECIALIST (INFOSEC)
Defense Finance and Accounting Service
Multiple Locations$57k to $101k
IT CYBERSECURITY SPECIALIST (INFOSEC)
Defense Information Systems Agency
Multiple Locations$115k to $150k
IT Cybersecurity Specialist (OS)
Joint Activities
Schofield Barracks, Hawaii$115k to $157k
IT Cybersecurity Specialist (PLCYPLN-INFOSEC)
U.S. Coast Guard
Alexandria, Virginia$122k to $158k
Marine Transportation System Specialist (Cyber)
U.S. Coast Guard
San Juan, Puerto Rico$90k to $116k
IT CYBERSECURITY SPECIALIST (SYSANALYSIS)
Defense Finance and Accounting Service
Multiple Locations$90k to $117k
Get more jobs like this by email
We will email you new GRC jobs in Richland, Washington as they post. Free and confidential, one click to unsubscribe.

Know your GRC? Take the 2-minute AI Governance Challenge. No signup needed.
Play now →

More GRC jobs: All GRC jobs · Search by category & location

Need help applying for this job?

Most people send the same résumé to forty roles and hear nothing. These three do something about that.

Free
Career Intelligence tools
Five AI tools: rank your matches, see what the role really demands, find the recruiter behind the posting, build an interview-ready company brief, and know your number before they ask.
Use the free tools →
$75
Résumé review by a GRC professional
A working GRC professional reads it line by line: what clears the ATS, what a hiring manager actually looks for, and which of your experience you are underselling.
Book a résumé review →
$75/hr
Coaching through your search
Someone who has run executive searches for 28 years, working your actual search with you: targeting, positioning, interviews and negotiation.
Book a coaching session →

Free tools need no account. Paid services are delivered by a person, not a template.