Executive Director, Security & Classified Operations and Chief Security Officer

RAND • Santa Monica, CA

12d • Onsite

About The Position

RAND is a nonprofit, nonpartisan research organization that provides leaders with information for evidence-based decisions. Its Security & Classified Operations (S&CO) organization partners with research divisions, Information Services, and Workplace Services to provide classified research capabilities and security processes that support effective, responsible research while protecting classified information and people.

As a member of RAND’s senior leadership team, the executive director leads the 55-person S&CO organization and serves as RAND’s Chief Security Officer. Reporting to the senior vice president, chief financial and operating officer, the executive director develops classified research capabilities for RAND’s FFRDCs and other research divisions. The role calls for rapidly establishing capabilities for evolving needs, maintaining leading-edge high-performance computing at all classification levels—including AI—and enabling virtual collaboration across RAND offices and with government sponsors.

The executive director will continue modernizing classified capabilities, deepen S&CO’s partnership with researchers, and develop a high-performing, service-oriented team while maintaining uncompromising security. The role oversees RAND’s classified capabilities, including government systems, facilities, and computing; security policies and programs; and hiring and development of classified IT and security staff in Santa Monica, Pittsburgh, and Arlington. The executive director partners closely with the CIO and Information Services on IT acquisition, maintenance, and staffing, and provides security advice to RAND’s non-U.S. offices.

This is an office-based position in Arlington, Virginia; Santa Monica, California; or Pittsburgh, Pennsylvania, with approximately 25% domestic travel required. The salary range is $273,000–$396,825. RAND notes that the range includes base pay plus sabbatic pay and offers benefits including health insurance, life and disability insurance, a savings plan, and paid time off.

Requirements

• At least 10 years of progressively responsible security, classified support, and/or IT experience.
• At least 5 years of management experience.
• Direct experience in both classified security and IT-related leadership roles.
• Active, transferable Top Secret clearance with SCI access and eligibility for SAP access.

Nice To Haves

• At least 15 years of experience is preferred.
• Significant management experience and deep familiarity with classified research and analysis and its supporting capabilities and requirements may also be considered.
• Experience working with a highly analytical, knowledge-based workforce.
• In-depth knowledge of special security regulations for U.S. government sponsors.
• In-depth knowledge of 32 CFR Part 117 (NISPOM), Intelligence Community Directives (ICDs), the Joint SAP Implementation Guide (JSIG), and Security Executive Agent Directives (SEADs).
• Significant experience managing special security facilities and providing associated computing and communications capabilities.
• Established relationships with government security counterparts.
• Experience preparing for and managing security and safety incident response.
• Experience designing and conducting security education and training programs.
• Familiarity with U.S. export control regulations.
• Broad knowledge of IT operations, information assurance, and classified system authorization, such as the Risk Management Framework; familiarity with current computing capabilities, including cloud and AI; and sufficiently deep IT knowledge to lead an IT workforce.
• Experience integrating large language models and AI-based applications into classified computing environments.
• Proven ability to attract, develop, and retain talent and build high-performing teams and organizations.
• Ability to foster a respectful, results-focused environment that empowers and motivates staff while ensuring accountability, accessibility, and leadership by example.
• Experience establishing organizational strategies, goals, and implementation priorities with stakeholders and prioritizing the mission and institution over organizational equities.
• A track record of leading change and continuous improvement, solving problems, questioning established practices, and transforming processes and organizational culture.
• Experience leading an organization known for exceptional customer service while balancing rigorous compliance with agile mission support.
• Experience managing a budget, using data to inform decisions, and shifting priorities and resources as circumstances change.
• Excellent judgment and managerial courage, including the ability to navigate ambiguity, act decisively, and lead calmly under pressure or in a crisis.
• Strong written and verbal communication and influence skills, including the ability to build trusted relationships and frame security in terms of the mission.
• An advanced degree in business, computer science, security, or a related field.
• ASIS Certified Protection Professional (CPP) certification.
• Membership in the Industrial Security Working Group (ISWG) and Contractor SAP Security Working Group (CSSWG).

Responsibilities

• Establish S&CO’s vision, strategy, goals, and execution priorities with RAND leadership and research divisions; communicate them to staff and use metrics to track and report progress.
• Develop and implement effective policies, procedures, and processes for department management, classified computing, and security, continually streamlining processes to improve service and speed.
• As RAND’s Insider Threat Program Senior Official and CSO, assess and mitigate risks, including insider threat and counterintelligence risks; manage incidents; and safeguard RAND and its ability to conduct its work.
• Ensure compliance with NISP, intelligence community, contractual, executive order, and other federal requirements for classified operations.
• Serve as the principal security liaison with sponsor security organizations, including the Departments of War and Homeland Security and the Intelligence Community, and build executive relationships with these organizations, DCSA, and law enforcement agencies.
• Monitor regulatory changes and emerging security and computing technologies, including AI and classified cloud offerings, and drive adoption to keep RAND’s classified research capabilities current.
• Lead and manage classified computing and security resources, staff, and facilities; determine staffing needs; attract, hire, and retain staff; develop staff and succession readiness; mentor managers; and lead performance management.
• Develop and manage the department budget, aligning resources with strategic priorities and adjusting as circumstances change.
• Serve as the primary security contact for RAND research division directors; understand their plans and proactively provide capabilities, security expertise, and classified computing support for programs and projects.
• Maintain facility accreditations and ensure authorization of classified information systems and secure communication systems; oversee interactions with DCSA, DIA, DISA, military departments, and other government agencies and maintain readiness for inspections.
• Administer SCI and SAP programs for government sponsors.
• Manage the travel security program, including international travel security and safety briefings and security threat analysis.
• Maintain a security education and awareness program for RAND staff that explains how security enables the mission.
• Maintain emergency response, business continuity, and disaster recovery programs, including plans, exercises, incident response, and training.

Benefits

• Health insurance coverage
• Life insurance
• Disability insurance
• Savings plan
• Paid time off
• Sabbatic pay providing additional compensation above base pay when vacation is taken

What This Job Offers

• Job Type: Full-time
• Career Level: Executive
• Education Level: No Education Listed