Senior Information Security Systems Officer (ISSO)

In a world of possibilities, pursue one with endless opportunities. Imagine Next!

 

At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible.

 

Job Description:

Parsons is looking for a talented Level 3 ISSO to join our growing team!

In this mission critical role you will develop, maintain, and implement information security standards, procedures, and guidelines for applications and databases. You will ensure that systems and organizational databases are protected from unauthorized access and use, and monitor systems, identify threats, and handle disaster recovery operations. Utilizes detailed knowledge of system functions, security policies, technical security safeguards, and operational or procedural security measures commonly used to implement NIST SP 800-53 security controls.

What You'll Be Doing:

• Perform assessments of systems and networks within the networking environment or enclave and identifies where those systems/networks deviate from acceptable configurations, enclave policy, or local policy. This is achieved through passive evaluations (compliance audits) and active evaluations (vulnerability assessments).
• Assists and provides Subject Matter Expertise in the Development of documentation in support of Risk Management Framework (RMF) processes; operating procedures, and policies;
• Establish strict program control processes to ensure mitigation of risks and supports for obtaining certification and accreditation of systems. This includes process support, analysis support, coordination support, security certification test support, security documentation support, investigations, software research, hardware introduction and release, emerging technology research inspections, and periodic audits.
• Perform analyses to validate established security requirements and recommends additional security requirements and safeguards where required.
• Support the formal Security Test & Evaluation (ST&E) required by each government accrediting authority through pre-test preparations, participation in the tests, analysis of the results, and preparation of required reports.
• Periodically conduct a review of each system’s audits and monitors corrective actions until all actions are closed.
• Contribute to and potentially lead the planning and implementation of large programs in the function, and regularly interfaces with senior management and executive leadership.
• Play a role in overall functional strategic planning.
• Assist in the implementation of required government policy (NIST 800-53, 800-137, ICD 503 etc…), and makes recommendations on process tailoring.
• Performing Continuous Monitoring (ConMon) duties in accordance with NIST SP 800-137 (Continuous Monitoring) to include auditing for anomalous or malicious user activity

What Required Skills You'll Bring:

• Active Top Secret/SCI with CI Polygraph.
• Bachelor’s Degree with 6+ years of relevant experience. Additional years of experience can count towards the lack of a degree, and additional education can count towards the years of experience requirement.
• Experience with Risk Management Framework (RMF).​
• IAT-III Certification in accordance with DoD 8140 guidance such as (e.g. CISSP, CASP, CISA, etc), or must be willing to obtain / maintain within 6 months of hire.

What Desired Skills You Might Bring:

• Leadership experience
• Effective interpersonal and communication skills
• Ability to Mentor, provide guidance and instructional aide to Mid-level and Junior ISSOs
• Familiarity with conducting research and analysis.
• Familiarity with network and information system security principles and best practices.
• Familiarity with controlling, labeling, virus scanning, and appropriately transferring data (uploading/downloading) between information systems at varying classification levels.
• Ability to work with the military, civilians, and other contractors at all levels.
• Ability to prioritize tasks.
• Familiarity with applicable IC and DoD policies, procedures and operating instructions related to Information Technology, Information Assurance, Information Management (IT/IA/IM).
• Effective interperson