Facility Security Officer (FSO)/ Insider Threat Program Senior Official (ITPSO)

Clarity Innovations•Herndon, VA

10d•$133,500 - $227,000

About The Position

The Facility Security Officer (FSO) / Insider Threat Program Senior Official (ITPSO) administers, implements, oversees, and continuously improves the organization’s industrial security and insider threat programs. The role ensures compliance with the National Industrial Security Program Operating Manual (NISPOM), 32 CFR Part 117, Defense Counterintelligence and Security Agency (DCSA) requirements, Security Executive Agent Directives (SEADs), and applicable Department of War, Intelligence Community, and government customer security directives. As the designated FSO for assigned cleared facilities, the position manages facility clearance requirements, personnel security, classified information protection, security education and awareness, incident reporting, government inspections, and industrial security compliance. As ITPSO, the role administers a comprehensive insider threat program to identify, assess, report, and mitigate potential threats to classified information, personnel, facilities, systems, and national security interests. The FSO/ITPSO works with the Director of Security, executive leadership, Information Technology, Human Resources, Legal, other security officers, and government security representatives to keep security programs compliant, proactive, scalable, and aligned with mission needs. The role also supports security standardization across facilities and CAGE codes, where applicable, and promotes responsible reporting while protecting individual privacy and due process.

Requirements

Bachelor's degree or equivalent combination of education and experience.
At least 10 years of industrial security experience supporting cleared federal contractors.
Prior experience serving as an FSO, Assistant FSO, Senior Industrial Security Specialist, or comparable security program lead.
Demonstrated knowledge of 32 CFR Part 117, NISPOM, DCSA requirements, and applicable Security Executive Agent Directives.
Experience developing, administering, or substantially supporting an insider threat program.
Experience preparing for and supporting DCSA security assessments and annual self-inspections.
Proficiency with DISS, NISS, NBIS, and related government personnel and facility security systems.
Experience administering personnel security processes and security reporting requirements.
Ability to interpret regulatory requirements and translate them into practical policies and procedures.
Experience developing and maintaining SPPs, security plans, training programs, and compliance documentation.
Strong organizational, analytical, problem-solving, and project management capabilities.
Excellent written and verbal communication skills.
Ability to manage sensitive information with discretion, professionalism, and sound judgment.
Ability to work independently, prioritize competing requirements, and provide effective security support in a fast-paced environment.
Active Top Secret security clearance required.
Ability to obtain and maintain required customer-specific accesses.
Completion of applicable DCSA FSO Certification, or ability to complete required training within 6 months.
Completion of required DCSA ITPSO training before assuming appointment duties, in accordance with applicable NISPOM requirements.
Ability to complete additional government- or customer-directed training.

Nice To Haves

Current SCI eligibility and/or access is strongly preferred.

Responsibilities

Serve as the designated FSO for assigned cleared facilities and CAGE codes, ensuring compliance with 32 CFR Part 117 and applicable government security requirements.
Develop, implement, maintain, and continuously improve the organization's industrial security program, policies, procedures, Standard Practice and Procedures, and compliance documentation.
Administer Facility Clearance requirements, coordinate with DCSA, maintain facility records in NISS, and ensure Key Management Personnel are documented and processed appropriately.
Review, interpret, and administer DD Form 254 and other classified contract security requirements; coordinate security needs for contract awards, subcontractors, facility changes, and organizational growth.
Conduct periodic assessments of security processes and advise security leadership and executives on requirements, emerging risks, and mitigation strategies.
Support security standardization across multiple facilities and CAGE codes operating under a Multiple Facility Organization, when applicable.
Serve as the formally appointed ITPSO and develop, implement, and maintain an Insider Threat Program Plan compliant with applicable requirements.
Establish and lead an Insider Threat Working Group or equivalent cross-functional coordination structure.
Coordinate the lawful and authorized collection and evaluation of insider threat information; establish procedures for identifying, documenting, escalating, and reporting indicators.
Coordinate with security leadership and government authorities on reportable information; submit required insider threat and adverse information reports through government channels.
Maintain insider threat records in accordance with applicable legal, privacy, retention, and government requirements.
Develop and deliver initial, annual, and role-specific insider threat awareness training; review program effectiveness and implement improvements.
Support DCSA insider threat program assessments, inspections, and corrective actions while promoting responsible reporting and protecting privacy and due process.
Plan and execute annual security self-inspections; maintain checklists, assessment tools, and supporting documentation.
Prepare facilities for DCSA reviews, vulnerability assessments, and government inspections; coordinate interviews, document reviews, and inspection activities.
Identify deficiencies, develop corrective action plans, monitor implementation, and validate resolution.
Prepare compliance reports, self-inspection summaries, and management briefings; support Senior Management Official self-inspection certification requirements.
Maintain inspection readiness through continuous monitoring, process improvement, personnel training, and updates reflecting changes to NISPOM, DCSA guidance, and government directives.
Oversee security requirements for receipt, handling, safeguarding, transmission, reproduction, and destruction of classified information.
Ensure classified information is accessed only by authorized personnel with appropriate eligibility, access authorization, and need-to-know; maintain material accountability and document control where applicable.
Ensure approved classified storage and safeguarding practices are implemented and maintained; collaborate with physical security personnel on facility security, access control, and safeguarding concerns.
Coordinate classified visits and government security inspections; support classified information incident response, preliminary inquiries, and required reporting.
Ensure security violations and potential compromises are documented, escalated, and reported; coordinate with program security personnel on collateral, SCI, and SAP responsibilities as applicable.
Collaborate with ISSMs and cybersecurity teams to align industrial security operations with system security plans and continuous monitoring requirements.
Develop and maintain a Security Education, Training, and Awareness Program, including initial briefings, annual refresher training, insider threat awareness, and specialized security training.
Develop training materials, employee notifications, awareness campaigns, and security guidance; track training completion and maintain supporting documentation.
Identify security knowledge gaps, recommend targeted education initiatives, and promote a culture of accountability, awareness, collaboration, and mission support.
Manage the identification, documentation, assessment, escalation, and reporting of security incidents; conduct or coordinate preliminary inquiries into suspected violations, potential compromises, and reportable concerns.
Determine reporting and escalation requirements with authorized security leadership and government representatives; submit reports within applicable timelines.
Develop corrective actions, recommend recurrence prevention measures, maintain incident records, and track resolution activities.
Coordinate incident response with Human Resources, Legal, Information Technology, and leadership when matters involve multiple functions; support graduated disciplinary procedures consistent with policy and applicable law.