Requisition Id 16684 Overview: Oak Ridge National Laboratory (ORNL) is seeking a dynamic, highly skilled Insider Threat Program Lead to oversee the day-to-day execution of ORNL’s Insider Threat Program (ITP). This role protects DOE and ORNL personnel, facilities, and classified/unclassified information and other U.S. Government assets by integrating counterintelligence (CI), cybersecurity, personnel security, human capital, legal, physical security, protective force, and other mission partners into a cohesive insider threat capability. This position also serves as ORNL law enforcement liaison officer and is responsible for coordinating VIP visits to ORNL. This position resides in the Physical Security Team in the Security Programs Group, Laboratory Protection Division, Facilities and Operations Directorate, at <a style="color:black" href="https://www.ornl.gov/">Oak Ridge National Laboratory</a> (ORNL). Major Duties/Responsibilities: <ul> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Ensure contractor compliance with the requirements outlined in the Contractor Requirements Document (CRD) of DOE O 470.5A and relevant federal directives (e.g., 32 CFR Part 117, Presidential/Executive direction including EO 13587).</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Create, maintain, and continuously improve the ORNL Insider Threat Program Plan and related site procedures (e.g. SBMS content as applicable).</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Ensure the program’s collection, retention, safeguarding, and disposition of records/data complies with Privacy Act requirements and National Archives and Records Administration (NARA) records requirements.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Coordinate with the Local Insider Threat Working Group (LITWG) and ensure accountability for all insider threat response actions.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Serve as the focal notification entity for reported insider/outsider threat information; conduct initial triage to determine credibility, threshold, risk level, and required actions.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Conduct analysis to identify, deter, and mitigate insider threat risk; develop site-specific risk management strategies in coordination with LITWG.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Act as the primary investigator/case agent/analyst for non-CI (or undetermined) matters; coordinate with CI and support CI investigations as requested/appropriate</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Conduct inquiries/investigations, including evidence gathering, interviews, documentation, and case management.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Facilitate contractor access to insider threat information, including personnel files, supervisory records, security data, cybersecurity logs, and other records required for analysis and response under DOE guidance.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Report incidents/information to the DOE Analysis and Referral Center (ARC) as required; provide contractor-derived data, reports, and assessments to DOE entities as appropriate.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Serve as ORNL’s primary liaison with DOE insider threat counterparts (e.g., DOE OITP/IN/EHSS as applicable) and participate in DOE meetings (including LITWG meetings).</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Serves as the ORNL law enforcement liaison officer and coordinate with law enforcement and request assistance when needed; compile and analyze information and coordinate referrals as appropriate.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Develop, deliver, and oversee contractor insider threat training in compliance with DOE O 470.5A, including initial awareness and annual refresher instruction covering detection methodologies, CI protocols, adversarial recruitment indicators, and workplace threat reporting procedures.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Maintain training records for contractor employees and provide annual certification reports to the Head of Field Elements or requestor as needed.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Responsible for planning and execution of all ORNL VIP visits, coordinating with local law enforcement, Protective Force, and the protocol office.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Provide support to Physical Security with Adverse Action planning and execution (if needed).</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Support emergency response coordination and provide 24/7 response when needed for significant incidents affecting ORNL security interests.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Perform other duties as assigned by management consistent with the role.</li> </ul> Basic Qualifications: <ul> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">BA or BS degree in Homeland Security, Law Enforcement, Security Studies, Counterintelligence, Information Technology, Cybersecurity, Leadership, or a related field.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Minimum of eight years of experience working in a tactical operations environment such as law enforcement, DOE security functions (e.g. protective force, physical security), counterintelligence, emergency management functions, or insider threat detection. A combination of education and experience may be considered.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Familiarity with DOE O 470.5A, national insider threat standards, and supporting compliance frameworks.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Strong written/oral communication skills; able to brief senior leaders and produce detailed, high-quality reports.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Field experience with emergency operations and scene triage.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Familiarity with National Incident Command System (ICS).</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Deep knowledge of Search and Seizure law.</li> </ul> Preferred Qualifications: <ul> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">MA or MS degree in Homeland Security, Law Enforcement/Criminal Justice, Security Studies, Counterintelligence, Leadership, or a related field.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">10+ years experience working in a tactical operations environment such as law enforcement, DOE security functions (e.g. protective force, physical security), counterintelligence, emergency management functions, or insider threat detection. A combination of education and experience may be considered.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Strong analytical skills, attention to detail, ability to prioritize and manage multiple tasks in a fast-paced environment.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Experience conducting investigations, interviews, and case preparation.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Experience in a lead or supervisory role with rapid assessment/problem solving skills.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Experience/certifications in instructing/public speaking.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Ability to successfully manage high-stress situations and complex, multi-tiered operations.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Experience with/knowledge of applicable Labor Laws.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Experience standing up or operating local insider threat constructs in a cleared environment.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Demonstrated capability integrating multi-source data (personnel, law enforcement, security, cyber, etc.).</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Technical familiarity with User Activity Monitoring (UAM), insider threat analytics, incident response, and complex investigation methods.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Experience working with or coordinating local insider threat programs such as LITWGs, Threat Assessment/Mitigation teams, or ARCs.</li> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Experience using AI-enabled tools to improve operational efficiency or reporting.</li> </ul> Special Requirements: <ul> <li style="font-family:arial, helvetica, sans-serif;font-size:10.0pt;color:black">Q Clearance: This position requires the ability to obtain and maintain a clearance from the Department of Energy. As such, this position is a Workplace Substance Abuse (WSAP) testing designated position. WSAP positions require passing a pre-placement drug test and participation in an ongoing random drug testing program.</li> </ul> About ORNL: As a U.S. Department of Energy (DOE) Office of Science national laboratory, ORNL has an impressive 80-year legacy of addressing the nation’s most pressing challenges. Our team is made up of over 7,000 dedicated and innovative individuals! Our goal is to create an environment where a variety of perspectives and backgrounds are valued, ensuring ORNL is known as a top choice for employment. These principles are essential for supporting our broader mission to drive scientific breakthroughs and translate them into solutions for energy, environmental, and security challenges facing the nation. ORNL offers competitive pay and benefits programs to attract and retain individuals who demonstrate exceptional work behaviors. The laboratory provides a range of employee benefits, including medical and retirement plans and flexible work hours, to support the well-being of you and your family. Employee amenities such as on-site fitness, banking, and cafeteria facilities are also available for added convenience. Other benefits include the following: Prescription Drug Plan, Dental Plan, Vision Plan, 401(k) Retirement Plan, Contributory Pension Plan, Life Insurance, Disability Benefits, Generous Vacation and Holidays, Parental Leave, Legal Insurance with Identity Theft Protection, Employee Assistance Plan, Flexible Spending Accounts, Health Savings Accounts, Wellness Programs, Educational Assistance, Relocation Assistance, and Employee Discounts. If you have difficulty using the online application system or need an accommodation to apply due to a disability, please email: <a style="color:black" href="mailto:[email protected]">[email protected]</a>. This position will remain open for a minimum of 5 days after which it will close when a qualified candidate is identified and/or hired. We accept Word (.doc, .docx), Adobe (unsecured .pdf), Rich Text Format (.rtf), and HTML (.htm, .html) up to 5MB in size. Resumes from third party vendors will not be accepted; these resumes will be deleted and the candidates submitted will not be considered for employment. ORNL is an equal opportunity employer. All qualified applicants, including individuals with disabilities and protected veterans, are encouraged to apply. UT-Battelle is an E-Verify employer.

Insider Threat Program Lead (Oak Ridge, TN, US, 37830) @ Oak Ridge National Laboratory

About this role

Ready to apply?