Privacy, Controlled Unclassified and Records Management Lead

Privacy, Controlled Unclassified and Records Management Lead

Pay Competitive

Location Washington / District Of Columbia

Employment type Full-Time

Job Description

Req# : 469907

Seeking a Privacy, Controlled Unclassified (CUI) and Records Management Lead to support the Small Business Administration (SBA). This position will provide compliance, documentation support, inclusion in information life cycle, streamlining processes, privacy reviews, privacy risk assessment and evaluation, continuous monitoring, audit support, functional and tabletop exercises for PII Incidences, collection and validation of agency reporting metrics. Additionally, the position will develop, organize, and maintain a records management process that adheres to SBA policies and guidelines in conducting and implementing records management processes and that fulfill the requirements of Federal law and policy for records management. Primary work location is the SBA Headquarters office in Washington, DC.

Responsibilities :

• Conducts related ongoing compliance monitoring activities in coordination with Security Policy and Compliance and other compliance offices to include operational assessment functions.
• Prepare and maintain a compliance crosswalk / matrix on SBA’s privacy documentation as it compares to federal laws, executive orders, federal standards, Office of Management and Budget (OMB) memoranda, circulars, agency internal policies, guidelines, National Institute of Standards and Technology guidance, and industry best practices.
• Evaluate and assess SBA’s Privacy Program, identifying gaps and developing a project plan in efforts to make whole and compliant with doctrine and meeting at least the minimum standards in compliance to NIST, OMB and best industry practices.
• Participate in Privacy risk assessments, audit support, evaluation support as related to privacy controls in collaboration with the security assessment and authorizations process, review of privacy controls on at least an annual basis and for purposes of continuous monitoring. Helpful for the contractor to be familiar with NIST’s Risk Management Framework and Privacy Risk Management Framework.
• Conduct at a minimum, annual privacy reviews on IT Systems / applications in the form of Privacy Threshold Analysis (PTA), Privacy Impact Assessments (PIA), Computer Matching Agreements, Data Sharing Agreements, Privacy Act Statements and System of Records Notices (which will also include any manual / paper system).
• Build a strategic and comprehensive CUI program that defines, develops, maintains, and implements policies and processes that enable consistent, effective CUI standards and practices which minimize risk and ensure the confidentiality, integrity, and availability of information, paper and / or electronic, across all media types is uniformed and consistent. Ensures CUI markings, labeling, categories, policies, procedures, and guidelines are up to date.
• Prepare and maintain a compliance crosswalk / matrix on SBA’s existing process with a “to be” model for CUI as it compares to federal laws, executive orders, federal standards, Office of Management and Budget (OMB) memoranda, circulars, agency internal policies, guidelines, National Institute of Standards and Technology guidance, and industry best practices.
• Collaborate with Program offices, OCIO, and Chief Data Officer to ensure CUI compliance is consistent with applicable law, regulations, and government-wide policies.
• Develop CUI standard operating procedures for offices to apply and implement the safeguarding and handling requirements for the proper marking, handling, safeguarding, and destruction within agency practices.

Requirements :

About the company

Versar is a world-class, global project management company providing balanced solutions to the public and private sector in Environmental Services, Security Systems, Engineering and Construction, and Professional Services.

#J-18808-Ljbffr