Job Title: Industrial Cyber Security Consultant

Work Place Flexibility: Hybrid

Legal Entity: Entergy Services, LLC

Please note: Authorization to work in the United States is a precondition to employment in this position. Entergy will not sponsor candidates for work visas for this position.

This position may be based out of our offices or plants in the following locations. Russellville, AR, Baton Route, Killona, St Francisville, or New Orleans, LA, or Jackson or Port Gibson, MS. Those outside of these regions would need to relocate without assistance

*This position will be filled as an IT Consultant or IT Specialist Sr. depending on candidate qualifications*

Job Summary/Purpose

This role serves as a technical compliance subject matter expert for the Entergy Nuclear Cyber Security Program and supports all Entergy Nuclear Sites in maintaining Cyber Security compliance. This position leads the development and application of Cyber Security positions, standards, and procedures associated with the Cyber Security Program. The technical lead supports a wide variety of Cyber Security activities associated with the design, implementation, maintenance, auditing, and inspection of Cyber Security Controls in the Entergy Nuclear Plants. This role interfaces with industry and regulatory bodies to represent Entergy in industry and regulatory initiatives along with the sharing of Cyber Security operating experience. Primary Duties & Areas of Responsibility:

Job Duties/Responsibilities

Provides Cyber Security Program level support for training, planning, guidance, and direction of the Nuclear Cyber Security Program.

Supports the analysis, implementation, testing, troubleshooting, and documentation of cyber security controls for critical components and systems at the nuclear plants. This includes systems such as plant digital control systems, emergency planning systems, security systems, plant monitoring systems, and other critical digital assets.

Provides planning, guidance, and operational support for the site cyber security infrastructure which includes such items such as SIEMS, vulnerability and compliance scanners, networking components, servers, and workstations.

Reviews the analysis of cyber security controls and recommends solutions to reduce the risk of cyber security sabotage to the nuclear plant and Entergy infrastructure.

Oversees and directs the implementation and change management of procedures and plans required to ensure nuclear sites adhere to the 10CFR73.54 cyber security regulations and ensure the sites meet the regulatory requirements.

Plans and reviews periodic assessments, benchmarks, and tabletops of the Cyber Security Program. Supports internal and external parties in the audits and NRC inspections of the Cyber Security Program.

Leads and reviews the analysis of incident response policies, takes an active role in cyber incident response and recovery, the identification of vulnerabilities in the network, and the performance of risk assessments on new and existing computer systems and equipment.

Develops and maintains a thorough knowledge of 10 CFR 73.54, NEI -08-09, site Cyber Security Plan, cyber security implementing procedures, and the cyber security defense-in-depth protective strategy.

Assists in the development of technical bases (justification) for License Amendment Requests and 10 CFR 50.54(p) evaluations.

Participates, organizes, and leads fleet peer group activities to ensure alignment across the nuclear fleet.

Interfaces with other internal departments such as the IT Security and Compliance group and the Chief Security Office to ensure alignment with company vision and strategy. Minimum Educational Background and Physical Requirements Required to perform Job:

Minimum Requirements

Minimum education required of the position.

Bachelor’s Degree Information Technology, Cyber Security, Engineering, or discipline or equivalent experience

Minimum experience required of the position.

4 years of experience in Cyber Security (threat and vulnerability management, application of cyber processes and controls, etc) with an electric power generation utility, previous nuclear power experience, or other industrial environment.

Minimum knowledge, skills, and abilities required of the position.

Experience in implementing security control policy and procedures.

Experience working with regulatory bodies associated with cyber security compliance.

Knowledge of system hardening, threat and vulnerability management, patch management, and configuration management.

Knowledge of security controls testing, security audits, and security assessments.

Knowledge and understanding of NIST controls.

Any certificates, licenses, etc. required of the position.

None Required

#LI-NW1

#HYBRID

Primary Location: Louisiana-Baton Rouge Louisiana : Baton Rouge || Arkansas : Russellville || Louisiana : Killona || Louisiana : New Orleans || Louisiana : St. Francisville || Mississippi : Jackson || Mississippi : Port Gibson

Job Function : Information Technology

FLSA Status : Professional

Relocation Option: No Relocation Offered

Union description/code : NON BARGAINING UNIT

Number of Openings : 1

Req ID: 116181

Travel Percentage :Up to 25%

An Equal Opportunity Employer, Minority/Female/Disability/Vets. Please clickhere (https://jobs.entergy.com/content/EEO/?locale=en_US) to view the EEI page, or see statements below.

EEO Statement: The Entergy System of Companies provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a protected veteran in accordance with applicable federal, state and local laws. The Entergy System of Companies complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment including, but not limited to, recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

The Entergy System of Companies expressly prohibits any form of unlawful employee harassment based on race, color, religion, sex, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Improper interference with the ability of the Entergy System of Company employees to perform their expected job duties is absolutely not tolerated.

Accessibility: Entergy provides reasonable accommodations for online applicants. Requests for a reasonable accommodation may be made orally or in writing by an applicant, employee, or third party on his or her behalf. If you are an individual with a disability and you are in need of an accommodation for the recruiting process please click here (humanr@entergy.com?subject=Accessibility) and provide your name, contact number, the accommodation requested and the requisition number that you are requesting the accommodation for. Employee Services will contact you regarding your request.

Additional Responsibilities: As a provider of essential services, Entergy expects its employees to be available to work additional hours, to work in alternate locations, and/or to perform additional duties in connection with storms, outages, emergencies, or other situations as deemed necessary by the company. Exempt employees may not be paid overtime associated with such duties.

Entergy Pay Transparency Policy Statement: The Entergy System of Companies (the Company) will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the Company’s legal duty to furnish information. 41 CFR 60-1.35(c). Equal Opportunity (https://www.dol.gov/agencies/ofccp/manual/fccm/2l-equal-opportunity-clauses-and-other-requirements/2l00-equal-opportunity) and Pay Transparency (https://www.dol.gov/sites/dolgov/files/OFCCP/pdf/pay-transp_%20English_formattedESQA508c.pdf) .

Pay Transparency Notice:

Pay Transparency Nondiscrimination Provision (dol.gov) (https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf)

The non-confidential portions of the affirmative action program for individuals with disabilities and protected veterans shall be available for inspection upon request by any employee or applicant for employment. Please contact HRCompliance@entergy.com to schedule a time to review the affirmative action plan during regular office hours.

WORKING CONDITIONS:

As a provider of essential services, Entergy expects its employees to be available to work additional hours, to work in alternate locations, and/or to perform additional duties in connection with storms, outages, emergencies, or other situations as deemed necessary by the company. Exempt employees may not be paid overtime associated with such duties.

Job Segment: Cyber Security, Compliance, Nuclear Engineering, Nuclear, Power Plant, Security, Legal, Engineering, Energy