To achieve these great efforts, Stratolaunch needs a dynamic security professional to serve as our Facility Security Officer.  The Facility Security Officer (FSO) position is responsible for developing, implementing and maintaining the security program to ensure all departments and team members comply with internal policies and procedures as well as government regulations, customer contract, and other applicable standards. 

The FSO will lead Stratolaunch through the facility clearance process and build and manage the security program including physical and cyber security, visitor control, security clearance processing, classification management, asset protection, and control. The FSO will provide measurable input to company processes and standards to achieve security objectives. The Company will look to the FSO to align the security objectives with the business objectives and apply the appropriate risk management framework to achieve overall Company success.

The FSO must implement a security Governance, Risk Management, and Compliance (GRC) program to adhere to all contractual and government requirements to include:

• National Institute of Standards and Technology (NIST) SP800-171 publications
• DoD 5220.22, National Industrial Security Program (NISPM)
• DoD 5220.22-M, NISP Operating Manual (NISPOM)
• JAFANs
• ICDs
• DD254 forms provided by the Government and/or prime contractors

The FSO will supervise and direct security measures necessary for implementing applicable requirements of this NISPOM and related Federal requirements for classified information.

In addition, this person must have a strong attention to detail, be well organized and be passionate about and motivate others to protect Stratolaunch, our partners, and our customers’ data. The ideal candidate should have strong analytical and problem solving abilities.

Security Processing:

• Implement, track, and manage a robust security program at Stratolaunch, ensuring compliance with industry standards, best practices, and Government flow-downs
• Support all functions of the security department including: training, risk identification, visit authorization, contractual documentation coordination, and foreign visitor procedures/access
• Apply industrial security standards related to document handling and custodial duties; JPAS; ISFD; STEPP; NISS corporate and government installations; visitor group security administration; and security planning for classified meetings and conferences.
• Coordinate, communicate, and cooperate with DoD, DSS, NISP, DISCO, DOHA, and federal investigators to ensure timely processing of employee documents and requests;
• Write and articulate security plans including Standard Operating Procedures, Security Processes, and Security Policies.
• Develops, maintains, and monitors adherence with company security policies and procedures to include inspections with DSS, DoD and other mandates.
• Plan and instruct in-house security education programs, including proper destruction and keeping of classified data.
• Ensure all appropriate personnel have attended security education programs and sufficient and auditable documentation is maintained and accessible.
• Develop, implement, and manage security requirements in support of the NISP and other security programs
• Keep company leadership informed at all times of any suspected compromise to security systems
• Own responsibility for physical security of assets including data to include, but not limited to: visitor management, access control, alarm accesses, and semi-annual testing with vendors.
• Lead Corporate Insider Threat Program as the Insider Threat Program Senior Official (ITPSO)
• Documents and keeps detailed records on documents entrusted to Stratolaunch, to include conformance with Stratolaunch’s internal document and retention repository schedules or requirements.
• Provides derivative classification services to ensure adequate levels of document and classification legends are utilized on documents.

Physical Security:

• Analyze and maintain appropriate levels of controls security documents and manuals.
• Ensure adequate and working controls (e.g. badging, locks, scanners, authentication, etc.) adequately secure all Company perimeter and rooms holding assets and data requiring additional protection.
• Perform and report on results of periodic inspections of Stratolaunch’s facilities’ and their perimeters aimed at identifying security or safety incidents and anomalies, breaches, etc.
• Ensure effective systems are in place that monitor and control access to facilities.
• Identify, assess and evaluate risks through any review, complaints and other data points and produces risk reports for company leadership
• Assist in preparation of emergency management and contingency planning
• Proactively conducts, supervise and prepares reports relating to internal investigations of any suspected losses or violations of company regulations, policies and procedures;
• Assist in the implementation and administration of security systems.
• Maintains records for periodic secure systems inspections with customer liaisons and other technical professionals.

Security Management:

• Develop and align a Risk Management Program with Senior Management
• Ensure all Key Management Personnel are aware of their Security responsibilities
• Keep abreast with all changes in policy and regulations
• Align security with Stratolaunch ITAR office and develop Technology Control Plans (TCP) as necessary.
• Ensure appropriate support is given to Controlled Unclassified Information (CUI)
• Align Security Objectives with Business Objectives
• Assist Senior Management with developing a security budget to address hardware, software, and personnel needs.
• Assist Senior Management with the ability to seek outside consultants if needed

Required Experience:

• Expert security knowledge and 8+ years of experience addressing Special Access Program (SAP) and Sensitive Compartmented Information (SCI) administration (even if FSO’s clearance may not be at that access level).
• Security Professional Education Development (SPED) or Industrial Security Professional (ISP) certification preferred
• Must provide annual Security Training, Education and Professionalization Portal (STEPP) Training Transcript showing successful completion of the FSO Non-Possessing Facilities Curriculum.
• Strong understanding and 5+ years of experience utilizing security procedures and security clearance processes.
• Proven experience resolving security and/or clearance problems effectively
• Proven experience supporting security requirements as a prime contractor and ensuring subcontractor security requirements are flowed down and met
• Experience with DD254's and the coordination of clearances (including verification of clearances) with prime and subcontractor security departments
• Experience in oversight of document control, physical security, and badging/access control systems
• Experience with Access Commander and/or other security databases.
• Outstanding judgment and flexibility
• Ability to read, analyze, and interpret technical, operations, financial, HR, and other procedures as well as contracts, documents, government regulations, qualification and test reports, etc.
• Ability to develop and present business presentations, reports and correspondence.
• Resilient self-starter, able to work independently, comfortable with ambiguity and committed to leading, collaborating and partnering to deliver results
• Ability to maintain upmost confidentiality of sensitive information
• Able to handle multiple and competing priorities and deadlines in a fast-paced environment with high attention to detail
• Demonstrated decision-making and creative problem solving skills
• Understanding of DoD 8570

Qualifications:

• Must be a US Citizen to qualify.
• Must have or be able to gain a top secret clearance. TS/SCI with poly preferred
• BA or BS degree or 4 additional years of work experience.
• 5+ years as a FSO
• 5+ years of physical security experience
• 8+ years of proven experience administering security clearance levels including Top Secret status or 8+ years of applicable proven security clearance administration or specialized security certification.
• Experience writing, implementing and enforcing policies and procedures in accordance with NIST, JAFAN, and ICD

Preferred Qualifications:

• Program Security Officer’s Launch Course
• Security + certification
• 2+ years as a COMSEC Custodian
• 1+ year experience with Information Assurance and System Security Plans
• Experience with Program Protection Methodologies

Travel estimated to be approximately 5-10%.  Position is based in Mojave, CA or Huntsville, AL.

$185,000-$205,000