National Industrial Security Program Lead/Manager

LOCATION: Columbia, MD

JOB STATUS: Full-time

CLEARANCE: Active TS/SCI

CERTIFICATION: FSO Program Management for Possessing Facilities

TRAVEL: Less than 5%

SALARY RANGE: $94K - $140K

Astrion has an exciting opportunity for an experienced Security Professional to manage the day-to-day administration of the facility's National Industrial Security Program. This position is full-time onsite in Columbia, Maryland.

REQUIRED QUALIFICATIONS / SKILLS

• Bachelor’s degree with 8-10 years of experience.
• Must understand and implement 32 CFR Part 117 (NISPOM) and applicable DCSA requirements.
• Completion of FSO Program Management for Possessing Facilities
• Experience in supporting U.S. Government clients.
• Experience with Security Business Integrated Management Systems (i.e., Sign-In-Compliance, Sign-In Enterprise, SIMS, etc.)
• U.S. citizenship with active TS/SCI eligibility and the ability to maintain such eligibility.

PREFERRED QUALIFICATIONS / SKILLS 

• Proficiency with DISS, NBIS, NISS, and related personnel/industrial security systems.
• Proficiency with DD Form 254 requirements and classified contracts/subcontracts.
• Knowledge of classified information handling, safeguarding, storage, transmission, destruction, and incident reporting requirements.
• Vulnerability assessment and remediation.
• Strong written and verbal communication skills, including the ability to train employees and advise program leadership.
• Excellent organization, attention to detail, discretion, and records-management skills.
• Prior experience as an FSO, AFSO, CPSO, security specialist, or industrial security professional in the defense/aerospace/government-contracting environment.
• Professional certifications such as ISP (Industrial Security Professional) or relevant CDSE training/certifications are a plus.

RESPONSIBILITES:

• NISP Compliance & Program Management: - Oversee the day-to-day administration of the facility's industrial security program; interpret and implement 32 CFR Part 117, contract security requirements, DCSA guidance, and applicable government security policies and guidelines.
• Classified Information Protection: Establish and oversee controls for receipt, generation, access, handling, reproduction, transmission, storage, and disposition of classified information; this includes safeguarding areas, approved storage, combinations/credentials, and physical security controls
• Personnel Security: Ensure personnel have appropriate eligibility, access authorization, need-to-know, briefings, and debriefings to support the facility operations.
• Continuous Monitoring and Improvement: Assess security risks, identify trends, recommend improvements to senior management, and ensure adequate security resources are available to meet the complexity and classified workload of the facility.
• Security Education & Training: Ensure personnel understand their responsibilities for safeguarding classified information and receive required initial, recurring/refresher, and termination/debriefing security training.
• Insider Threat: Coordinate with the Insider Threat Program Senior Official (ITPSO) and ensure security-program information relevant to insider threat is identified, reported, and integrated into the insider-threat program.
• Self-Inspections & Corrective Actions: Conduct or coordinate required self-inspections, identify vulnerabilities and deficiencies, develop corrective actions, brief management, and maintain supporting records.
• DCSA Interface: Serve as a principal facility contact for the servicing DCSA Industrial Security Representative, support DCSA security reviews/assessments, respond to findings, and maintain required records/documentation. DCSA notes that routine ISR engagement normally flows through the FSO.
• Security Procedures: Develop and maintain local Standard Practice Procedures (SPPs), SOPs, plans, and processes appropriate to the facility's classified operations.
• Information Systems Collaboration and Coordination: Coordinate with the Information System Security and Information Technology teams.
• Provide Security input for Security Plans, POA&Ms, and Configuration Management Plans.
• Security Incidents: Conduct inquires to actual or suspected loss, compromise, unauthorized disclosure, security violations, and other incidents; preserve relevant information, conduct required inquiries, report through appropriate channels, and implement corrective actions.
• Technical Advising - Advise program managers, system owners, and administrators on security implications of risk decisions.
• Security Reporting: Ensure proper reporting of adverse information, suspicious contacts, security incidents, foreign contacts/travel and other insider-threat indicators.