CLASSIFIED SECURITY OFFICER (CSSO/ISSM)

The NORDAM Group

1d•Hybrid

About The Position

A hybrid role responsible to meet classified program security needs. Responsible for establishing, managing and leading all aspects of the company’s classified SCI (Sensitive Compartmented Information) & SAP (Special Access Programs) specific needs for program, people, facility and IT/communications in support of classified contracts. Performs program specific facility security management with oversight of cybersecurity compliance for classified information systems, ensuring full adherence to NISPOM/32 CFR Part 117, RMF, DoD, and customer-specific security requirements. Serves as the primary interface with DCSA and other government security agencies, government customers, customer program security personnel and internal stakeholders on all matters related to physical security, personnel security, and cybersecurity. Develops and provides leadership to institutionalize the processes of Continuous Improvement in accordance with organization goals and objectives.

Requirements

Minimum 4 Year / Bachelors Degree. In appropriate or related discipline
5 - 10 or more year(s) Industrial security, cybersecurity or in combination roles, i.e. CSSO, ISSM or ISSO roles supporting classified programs
year(s) Government contracting environment or with DCSA
year(s) Supporting Classified/SCI/SAP security environments
year(s) Program leadership within a classified environment and/or in these co-disciplines
Supervisory/Management Experience year(s)
3 - 5 or more year(s) Program leadership within a classified environment and/or in these co-disciplines
Highly effective oral and written communication skills with the ability to interact with all levels of Stakeholders, vendors and agencies
Excellent interpersonal, organizational and analytical skills
Ability to manage multiple priorities and operate independently in a fast-paced environment
Strong working knowledge of NISPOM/32 CFR Part 117 and SCI/SAP directive mastery (ICD-705, DoDM 5105, SAP security manuals)
Strong working knowledge of Risk Management Frameworks (RMF), SSP creation, Control traceability, POA&M development and Continuous monitoring artifacts requirements.
Active TS/SCI with SAP & polygraph eligibility
TS/SCI clearance required for classified environments
Active Secret or Top-Secret U.S. Security clearance required, depending on programs
Knowledge of DoD 5205.07 and other related regulations and directives
Advanced knowledge of NIST, RMF, CNSSI, and DoD IA policies
Familiarity with auditing tools, STIGs, eMASS and vulnerability management processes
Ability and willingness to assist and transfer technical knowledge to less experienced Stakeholders.

Nice To Haves

Certifications: CISSP (Certified Information Systems Security Professional), Security+ (Comp TIA), Other DoD 8570/8140 compliant certifications
If applicable, a combination of experience and training may be substituted for the education requirement.

Responsibilities

Manage all aspects of Classified, SCI (Sensitive Compartmented Information) & SAP (Special Access Programs) program security requirements across programs and facilities in accordance with NISPOM/32 CFR Part 117 and contract requirements.
Oversee personnel security processes for clearances, requisitions and/or billet plans and access requests, including clear initiation, maintenance, incident reporting, and continuous monitoring.
Maintain and update standard operating procedures, fixed facility checklists and security plans.
Develop and conduct security training, briefings and debriefings for cleared personnel and education of non-cleared personnel as required to maintain the necessary security environment.
Develop and control Classified document/material control accountability, storage, transmission, destruction, and inventory processes.
Lead self-inspections, coordinate DCSA and other relevant regulatory security assessments, and ensure corrective actions are implemented.
Manage access control, visitor authorization, and overall compliance for classified work areas, i.e. SCIF (Sensitive Compartment Information Facility), SAPF (Special Access Program Facility), if applicable.
Serve as primary for classified systems, overseeing RMF (Risk Management Framework) accreditation, system security documentation creation and continuous monitoring.
Coordinate with IT and system owners to ensure cybersecurity controls are implemented, tested and maintained.
Manage audit reviews, vulnerability mitigation, incident response and POA&M tracking.
Oversee staff supporting the day-to-day system security operations.
Interface with government security officials on cybersecurity matters, including system assessments and approvals.
Collaborate with Business Development, Contracts and/or Legal, Facilities, HR, IT, Program Management, and Operations to ensure security requirements are integrated into daily workflow.
Guidance and oversight for subcontractor/partner security when relevant for classified programs.
Lead investigations of security incidents and ensure timely reporting and corrective actions.
Provide guidance to leadership on risk mitigation, system authorization timelines and compliance posture.
Performs other duties as required. These duties may include assignments in job classifications and departments other than the primary assignment.