Facility Security Officer/ISSM-Skillbridge Internship

Sparton•Fairfax, VA

18d•Onsite

About The Position

Twenty-Six Defense Maritime is hiring for a Skillbridge opportunity combining Facility Security Officer (FSO) duties with desired Information System Security Manager (ISSM) responsibilities. The FSO implements and maintains a security program compliant with the National Industrial Security Program Operating Manual (NISPOM), 32 CFR Part 117, and other applicable regulations, and supports security actions in accordance with corporate and government policies and directives. The role partners with cognizant security authorities, senior management, and personnel. The ISSM function maintains the appropriate operational security posture for Sparton’s Authorized Information Systems (AIS). It involves managing information-system security and overseeing day-to-day security operations for systems, associated media, and networks. The position is onsite in Fairfax, Virginia, with minimal travel. Work takes place in professional office and manufacturing environments. Potential exposures include fumes or airborne particles, moving mechanical parts, vibration, extreme plant conditions, and loud noise. The role frequently involves sitting, standing, talking, communicating, using hands and fingers, feeling, and reaching with arms, and requires lifting up to 50 pounds and bending or stooping as necessary.

Requirements

Must be active military and eligible for Skillbridge.
Active Secret clearance and ability to obtain and maintain a Top Secret clearance.
U.S. citizenship.
Working knowledge of 32 CFR Part 117 (NISPOM), ICDs, and associated industrial security regulations.
Experience with government systems including DISS, NCAISS, e-APP, NBIS, and SWFT.
Ability to perform technical certifications for systems presented to the government for authorization, including type accreditation.
Understanding of network concepts and Type 1 encryption devices such as TACLANE.
Ability to obtain and maintain a Top Secret clearance.
Physical ability to lift up to 50 pounds and bend or stoop as necessary.

Nice To Haves

Experience as an FSO.
CDSE FSO Certification; if not already completed, it must be completed within six months of starting.
One to two years of experience as an assistant ISSO, Alternate ISSM, or DoD equivalent in an organization of similar size and complexity.
Relevant bachelor’s degree.
Experience with AIS reaccreditation and NIST Risk Management Framework security controls, including NIST SP 800-171, SP 800-53, and DAAPM.
Knowledge of other security disciplines and how they affect and interact with information-system security.
Familiarity with CUI requirements for unclassified IT systems and the SIPRnet connectivity process.
Security+, CISSP, or other DoD 8570.1 certification.
Familiarity with Microsoft Windows 10 security and administrative settings and ability to meet STIG, JSIG, and NISPOM requirements for information systems.

Responsibilities

Implement and maintain a security program that complies with NISPOM (32 CFR Part 117), other regulations, and applicable corporate and government policies and directives.
Manage physical and Proxy Agreement security requirements, including working with Foreign Ownership, Control and Influence (FOCI) policy and security structure.
Advise senior leadership on physical and industrial security matters and liaise with DCSA on classified and controlled unclassified information safeguarding, handling, Proxy/National Security Agreement compliance, and reporting.
Develop and maintain facility compliance procedures and materials, including SOPs, SPPs, OPSEC materials, Emergency Action Plans, and risk analysis investigations.
Establish and maintain security-awareness training, including required annual, counterintelligence, espionage, insider-threat, courier, NATO, debriefing, indoctrination, and foreign-travel briefings.
Safeguard and maintain accountability of classified materials and areas in accordance with NISPOM.
Conduct periodic self-inspections of local processes and practices, assess Proxy Agreement and component program security compliance, and report security posture to site, group, and corporate leadership.
Oversee reception security duties, including badge handling and processing, visitor control, and physical security management.
Oversee employee, visitor, consultant, and government-representative badging in accordance with company policy.
Manage visit requests and cleared-personnel visit requests using DISS; process and manage personnel clearances using DISS and assist applicants with the e-QIP process.
Plan, examine, analyze, evaluate, and oversee security operations; prepare reports and records for management.
Conduct annual clearance justifications and advise leadership when an employee does not meet clearance requirements.
Manage OPSEC requirements for government-sensitive programs and ensure cleared personnel receive initial and refresher training.
Review, prepare, and update ATO packages in accordance with the NIST Risk Management Framework and customer policies, procedures, and guidelines.
Identify and communicate changes affecting information-system security authorization, identify security deficiencies or discrepancies, and recommend solutions.
Liaise with government agencies, including DSS Information System Security Professionals and Advanced/Special Program government Security Control Assessors, as well as internal and external customers.
Develop, implement, and maintain System Security Plans, SOPs, and information-security policies to ensure RMF compliance.
Develop and maintain POA&Ms through mitigation and risk acceptance.
Oversee scheduling, installation, implementation, and maintenance of security software integrations on information systems within the role’s purview.
Ensure appropriate measures are taken when an information-system incident or vulnerability is discovered.
Maintain and execute the information-security continuous-monitoring plan.
Ensure configuration-management policies and procedures for hardware and software authorization are followed; assess system, environmental, and operational changes that could affect security authorization.
Perform self-inspections and coordinate security reviews of system test plans.
Identify vulnerabilities and work with technical subject-matter experts to identify and implement countermeasures.
Assist with coordination, preparation, and tracking of information-system inspections, reports, and responses.
Deploy and configure scanning tools for security vulnerability reviews supporting continuous monitoring.
Conduct manual SRG/STIG checklist reviews and remediation.
Conduct scheduled audits and manage audit data.
Prepare reports on the status of security safeguards applied to computer systems.
Ensure information systems and network nodes are operated, maintained, and disposed of in accordance with security policies and practices.