Job Duties/Scope Of Work
The Insider Threat Program Administrator is responsible for leading the development, implementation, administration, and continuous improvement of the site's Insider Threat Program. This role serves as a central coordinator for insider threat prevention, awareness, reporting, assessment, and mitigation activities across the organization.
The position will work closely with Security, Human Resources, IT, Continuous Improvement, leadership, and DOE stakeholders to establish processes, policies, and communication pathways that strengthen the site's ability to identify and manage insider threat risks.
This role also serves as a central point of coordination for insider threat reviews, program activities, and organizational response efforts, as applicable. In addition, the position will support policy development, training, awareness, metrics, and continuous improvement activities related to insider threat prevention and response.
As an additional responsibility, this position will provide classified cybersecurity support in coordination with technical teams. This may include assisting with secure configuration practices, vulnerability remediation coordination, access control support, system monitoring awareness, and other cybersecurity-related administrative activities that complement the Insider Threat Program.
Key Responsibilities
- Design, implement, and administer a comprehensive Insider Threat Program tailored to site needs
- Develop processes for insider threat identification, reporting, risk assessment, mitigation, and program oversight
- Coordinate insider threat activities across Security, Human Resources, IT, Continuous Improvement, and other relevant organizations
- Serve as a primary liaison for insider threat-related communication and collaboration across departments
- Develop, update, and maintain policies, procedures, and protocols related to insider threat prevention and awareness
- Conduct or coordinate training and awareness activities for employees and leadership on insider threat indicators, reporting expectations, and preventative measures
- Evaluate program effectiveness and recommend improvements to address evolving risks, trends, and regulatory expectations
- Support insider threat-related inquiries, reviews, and response coordination, as applicable
- Maintain documentation, records, metrics, and reporting associated with program activities
- Provide classified cybersecurity support in coordination with system administrators, cybersecurity staff, and system owners
- Assist with secure configuration practices, account management, and access control coordination
- Support vulnerability identification, tracking, and remediation efforts
- Assist with system monitoring, logs, alerts, and security-related follow-up actions
- Support documentation of technical procedures, configurations, and security processes
- Coordinate with cybersecurity teams on audits, assessments, compliance activities, and remediation actions
- Provide support for server administration, patching, and technical solution implementation
Basic Qualifications
*Bachelor's degree in information systems, business, security, or technical field such as security management, business administration, computer science, or cybersecurity; and 6 years of relevant experience; or an equivalent combination of education and experience
- Strong understanding of insider threat dynamics, risk indicators, and mitigation strategies
- Experience developing, implementing, administering, or supporting security-related programs
- Proven experience collaborating with cross-functional teams, especially Security, Human Resources, and Information Management
- Excellent written, verbal, and interpersonal communication skills
- Ability to engage effectively with stakeholders at all organizational levels
- Ability to handle sensitive and classified information with discretion and professionalism
- Experience documenting processes, procedures, and program activities
- Working knowledge of cybersecurity principles, access control, and secure administrative practices
- Ability to obtain and maintain a Personal Identity Verification (PIV) Credential badge.
Desired Qualifications
*Bachelor's degree in Information Management, Security Management, Cybersecurity, or related field
- Experience leading or supporting an Insider Threat Program in a regulated or government environment
- Knowledge of security regulations and compliance standards, such as DOE Orders, NISPOM, and related requirements
- Experience in incident response or investigations related to insider threat concerns
- Familiarity with data loss prevention (DLP) tools and techniques
- IT or cybersecurity experience associated with insider threat detection, analysis, or mitigation
- Experience with vulnerability management, SIEM tools, endpoint protection, or log management solutions
- Experience supporting secure enterprise or classified environments
- Experience with Windows Server, Linux, Active Directory, or related enterprise technologies
Preferred Certifications
- Certified Protection Professional (CPP)
- Certified Information Systems Security Professional (CISSP)
- CompTIA Security+
- Other relevant security or cybersecurity certifications
Compensation & Benefits
Grade 17: $99,063 - $124,788
Grade 18: $109,013 - $137,538
Grade 19: $119,813 - $151,038
HMIS offers a comprehensive benefits package that includes medical/dental/vision, short-and long-term disability, life insurance, 401(k) plan, and paid time off. For a full list of benefits please visit our benefits website: https://hmis.hanford.gov/hr/page.cfm/employeebenefits
In accordance with the HMIS salary determination process, offers will be made by taking into consideration the level of assigned job duties, responsibilities, and the candidate's qualifications relative to internal peers and the external labor market. A candidate's salary history will not be used in compensation decisions. The salary range listed represents the full range of salary that may be offered.
This position may be required to complete a probationary period. Benefits for eligible employees will begin on day one.
In compliance with Homeland Security Presidential Directive 12 (HSPD-12) and Department of Energy (DOE) Hanford Field Office (HFO) direction, employees issued initial badges on or after September 1st, 2025, are required to obtain and maintain a HSPD-12 Personal Identity Verification (PIV) Credential. To obtain this credential, new employees must successfully complete and pass a federal background check investigation. This investigation encompasses multiple areas of eligibility and includes a declaration of illegal drug activities, including use, supply, possession, or manufacture within the last year. This includes marijuana and cannabis derivatives, which are still considered illegal under federal law, regardless of state laws.
