Position Summary

The incumbent is responsible for working with the CNS Cyber Security Program Manager on the development, implementation, and administration of Cooper Nuclear Station’s approved Cyber Security Plan. The incumbent is responsible for selection, development and supervision of staff responsible for the development and maintenance of the necessary processes, procedures, programs, and systems to ensure that NPPD is compliant with 10CFR73.54. Responsible for related support activities carried out by the department staff as well as performance appraisals and salary administration of direct reports.This position is responsible for the collaboration and knowledge sharing with the District's overall cybersecurity program, including working with the CIP Operations/Business Continuity and Corporate Cyber Security teams to ensure NPPD implements compliance standards effectively and efficiently.

NOTE: CNS Cyber Security Supervisor will matrix report to the Director of Cyber Security.

Education, Training and Experience

Bachelor’s degree in Computer Science, Information Technology (IT), Business or closely related field plus 3 years of progressively responsible IT experience (OR) an Associate’s degree plus 5 years of progressively responsible IT experience.

Incumbent must have at least 2 years of management, supervisory, or mentoring experience or experience in leading IT projects and teams dealing with complex issues.

Experience in nuclear utility business and cyber security processes preferred.

Licenses and/or Certifications

Certified Information Systems Security Professional (CISSP*), Certified Information System Auditor, Certified Information Systems Manager, or equivalent certification preferred.

• If an Employee holding this position does not have a cyber security certification, attaining the certification will be addressed through the development plan inside the annual review process and must be obtained within an agreed upon timeframe, but no later than 2 years after acceptance into the position.

Essential Duties & Responsibilities

Leads effort to review, adjust, monitor, and execute impacts of the Nuclear Regulatory Commission (NRC), Nuclear Energy Institute (NEI), and the National Institute of Standards and Technology (NIST) standards as it relates to cyber security of the nuclear plant in collaboration with appropriate departments. This includes coordination of submittal from/to responsible departments and persons assigned to those standards relating to cyber security. Become the NPPD subject matter expert on the NRC regulatory cyber security requirements and implementation of NEI/NIST Guidance and Standards.

Works with appropriate departments to develop a communication and training plan ensuring all CNS personnel are kept properly informed and trained in all requirements of the CNS Cyber Security Program as it relates to all NRC/NEI compliance developments. This includes development, implementation, and monitoring of the CNS Cyber Security training and communications programs in collaboration with appropriate departments to ensure compliance.

Work with the appropriate departments to ensure existing CNS processes serve to maintain all necessary records concerning regulatory cyber security compliance.

Coordinate with the appropriate CNS departments the submittal of all data to the NRC, including self-reporting any violations of standards, self-certification, and work with the CNS Cyber Security Program Manager to act as a focal point for NRC cyber security audits, CNS self-audits, investigations, and mitigation plan development.

Essential Duties & Responsibilities (Continued)

Prepares, recommends, and provides oversight of the CNS Cyber Security O&M and capital budget. Provides monthly status updates to the CNS Information Technology Manager. Support and provide direct oversight to the business case creation and project management support necessary to complete CNS Cyber Security initiatives.

Serve as a consultative resource to other areas in understanding and compliance with cyber security regulatory requirements. Provides support to improve team members understanding of NRC regulatory cyber security requirements.

Establishes continuous personal development for his/her employees, practices career planning, coaching, training, and counseling in the work unit. Is responsible for supervisory activities including, but not limited to, hiring, performance management, disciplinary action, and salary administration.

Accountable for other duties as assigned.

Core Competencies