CLASSIFIED SECURITY OFFICER (CSSO/ISSM)

Job Summary

A hybrid role responsible to meet classified program security needs. Responsible for establishing, managing and leading all aspects of the company's classified SCI (Sensitive Compartmented Information) & SAP (Special Access Programs) specific needs for program, people, facility and IT/communications in support of classified contracts. Performs program specific facility security management with oversight of cybersecurity compliance for classified information systems, ensuring full adherence to NISPOM/32 CFR Part 117, RMF, DoD, and customer-specific security requirements. Serves as the primary interface with DCSA and other government security agencies, government customers, customer program security personnel and internal stakeholders on all matters related to physical security, personnel security, and cybersecurity. Develops and provides leadership to institutionalize the processes of Continuous Improvement in accordance with organization goals and objectives.

Essential Functions & Key Responsibilities

• Manage all aspects of Classified, SCI (Sensitive Compartmented Information) & SAP (Special Access Programs) program security requirements across programs and facilities in accordance with NISPOM/32 CFR Part 117 and contract requirements.
• Oversee personnel security processes for clearances, requisitions and/or billet plans and access requests, including clear initiation, maintenance, incident reporting, and continuous monitoring.
• Maintain and update standard operating procedures, fixed facility checklists and security plans.
• Develop and conduct security training, briefings and debriefings for cleared personnel and education of non-cleared personnel as required to maintain the necessary security environment.
• Develop and control Classified document/material control accountability, storage, transmission, destruction, and inventory processes.
• Lead self-inspections, coordinate DCSA and other relevant regulatory security assessments, and ensure corrective actions are implemented.
• Manage access control, visitor authorization, and overall compliance for classified work areas, i.e. SCIF (Sensitive Compartment Information Facility), SAPF (Special Access Program Facility), if applicable.
• Serve as primary for classified systems, overseeing RMF (Risk Management Framework) accreditation, system security documentation creation and continuous monitoring.
• Coordinate with IT and system owners to ensure cybersecurity controls are implemented, tested and maintained.
• Manage audit reviews, vulnerability mitigation, incident response and POA&M tracking.
• Oversee staff supporting the day-to-day system security operations.
• Interface with government security officials on cybersecurity matters, including system assessments and approvals.
• Collaborate with Business Development, Contracts and/or Legal, Facilities, HR, IT, Program Management, and Operations to ensure security requirements are integrated into daily workflow.
• Guidance and oversight for subcontractor/partner security when relevant for classified programs.
• Lead investigations of security incidents and ensure timely reporting and corrective actions.
• Provide guidance to leadership on risk mitigation, system authorization timelines and compliance posture.

Performs other duties as required. These duties may include assignments in job classifications and departments other than the primary assignment.