Companies you'll love to work for
Search Central New York jobs and find the career you were made for
Risk Management Framework Specialist
Parsons Corporation
Posted 6+ months ago
In a world of possibilities, pursue one with endless opportunities. Imagine Next!When it comes to what you want in your career, if you can imagine it, you can do it at Parsons. Imagine a career working with intelligent, diverse people sharing a common quest. Imagine a workplace where you can be yourself. Where you can thrive. Where you can find your next, right now. We’ve got what you’re looking for.
Job Description:
Parsons is looking for an amazingly talented Risk Management Framework Specialist to join our team! In this role you will support Security and Installations Directorate (SI), and Security and Installations Personnel Security Division (SISP) in seven systems to include: Background Investigation Support Systems, Fingerprint System, Financial Disclosure System, Military Processing System, Process Robotics SPID System, and Polygraph Support System.
What You'll Be Doing:
- Prepare security documentation for seven systems to include test plan, security plans, hardware list, software list data flow diagrams, standard operating procedures, policies and network diagrams, topological drawings to illustrate the interconnection between the systems and or networks.
- Ensure proper use of remote access connectivity from Customer to the Personnel Security and Background Investigation systems approved by Customer’s CIO and Information Technology Services Directorate (CIO-T) office and maintained in accordance with Customer’s policy and procedures.
- Services offered ensure the File Transfer Protocol (FTP) connections from the Customer to the Background Information system meets Customer and National Institute of Standards and Technology (NIST) requirements.
- Data sensitivity, coordinate use of multiple security countermeasure to protect the integrity of the information assets in the enterprise is overarching goal, in addition to protecting and ensuring data sensitivity is being enforced.
- Ensure the user community of this network is in conformance with all computing standards of the Customer.
- Information exchange security ensure the site-to-site VPN tunnels are established based on the Customer and Department of Defense (DoD) requirement.
- Rules of behavior the Personnel Security and Background Investigation systems, users are protecting the data in accordance with the Customer and DoD policies, standards, regulations, and procedures for the specified systems.
- Formal security policy and procedures ensure investigation operations will follow accreditation standards using Intelligence Community Directive (ICD) 503, RMF, categorizing methods of High Confidentiality, High Integrity, and Moderate Availability level. The contractor is expected to protect the Background Investigation systems through implementation of security controls that protect against malicious behavior to include intrusion, tampering and virus between the two systems.
- Audit trail responsibility provide a means to detect, prevent, record in an audit trail and report to the Information System Security Officer (ISSO) any attempts by non-authorized users to access the system. Provide audit logs to the Customer monthly.
- Ensure security parameters controls that were identified by the Customer be augmented by policies and procedures.
- Ensure Security categorization of High Confidentiality, High Integrity and Moderate Availability based on the information types are followed.
- Training and awareness of system, contractors are required to complete annual refresher IT Security Awareness training as well as additional security training based on their Security Specialist roles and responsibility.
- Specific equipment restrictions, document all interconnections are required for all systems.
- Ensure no personal computers or other agency computers will be used across the interconnection or on the Customer Networks.
- As part of the monthly report, conduct vulnerability scans bi-weekly and Security Technical Implementation Guide (STIG) System scans every three months and provide results of scans.
What Required Skills You'll Bring:
- Active TS with SCI eligibility and ability to successfully complete a polygraph examination.
- Bachelor's degree or equivalent experience in a related field
- 11 - 15 years of relevant work experience.
Minimum Clearance Required to Start:
Top SecretThis position is part of our Federal Solutions team.Our Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our diverse, intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what’s next to deliver the solutions our customers need now.We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!Parsons is an equal opportunity employer committed to diversity, equity, inclusion, and accessibility in the workplace. Diversity is ingrained in who we are, how we do business, and is one of our company’s core values. Parsons equally employs representation at all job levels for minority, female, disabled, protected veteran and LGBTQ+.We truly invest and care about our employee’s wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars! Imagine next and join the Parsons quest—APPLY TODAY!