Issm/Fso

The Information Systems Security Manager (ISSM) / Facility Security Officer (FSO) is responsible for establishing, maintaining, and overseeing the classified information systems security program and serving as the designated FSO for the facility.

As the ISSM, this position ensures classified information systems are properly authorized, maintained, monitored, and operated in accordance with applicable government requirements, approved security plans, and established policies and procedures. The ISSM ensures audits, updates, backups, and continuous monitoring activities are conducted in accordance with the approved system security documentation and is responsible for troubleshooting, maintaining, and building classified information systems to meet applicable STIG and government security requirements.

As the FSO, this position is responsible for managing and administering the facility's National Industrial Security Program (NISP) requirements and maintaining compliance with applicable DCSA and U.S. Government security requirements.

Information Systems Security Manager (ISSM)

• Develop, implement, and maintain a formal Information Systems Security Program.
• Review System Security Plans (SSPs), make required revisions, and endorse documentation determined to be acceptable.
• Provide direction and oversight to Information System Security Officers (ISSOs) to ensure established information security policies and procedures are followed.
• Ensure the development and maintenance of system authorization and security documentation and coordinate required submissions with the appropriate government authority.
• Ensure approved procedures are established and followed for clearing, sanitizing, purging, declassifying, and releasing system memory, media, and output.
• Maintain, as required by DCSA and other government agencies, a repository of system authorization documentation, approvals, modifications, and supporting records.
• Coordinate information system continuous monitoring activities, self-inspections, vulnerability assessments, and DCSA reviews.
• Implement and enforce information system security policies and procedures.
• Maintain and troubleshoot classified information systems and ensure systems are configured in accordance with applicable STIG and security requirements.
• Coordinate system changes, updates, hardware/software modifications, and authorization requirements with applicable government representatives.
• Ensure classified information systems remain compliant with approved security configurations and authorization requirements.

Facility Security Officer (FSO)

• Serve as the designated Facility Security Officer (FSO) and primary facility point of contact for DCSA and other applicable government security representatives.
• Manage and administer the facility's industrial security program in accordance with 32 CFR Part 117 (NISPOM), DCSA requirements, contractual security requirements, and company policies.
• Maintain the facility's security program and ensure continued compliance with Facility Clearance (FCL) requirements.
• Manage personnel security requirements, including clearance processing, access eligibility, visit requests, security briefings, debriefings, and required reporting through applicable government systems.
• Maintain required security records and documentation and ensure reportable information is submitted to the appropriate government agency as required.
• Conduct and document required self-inspections and support DCSA security reviews and assessments.
• Administer security education, training, and awareness requirements for cleared employees.
• Review and administer DD Form 254 requirements and coordinate security requirements with Contracts, Program Management, and other applicable functions.
• Oversee classified visit authorization, classified material accountability, transmission, receipt, storage, safeguarding, and destruction requirements, as applicable to the facility.
• Ensure security incidents, potential compromises, suspicious contacts, and other reportable security matters are properly documented, investigated, and reported as required.
• Coordinate with company leadership, Human Resources, Legal, Information Technology, Cybersecurity, Contracts, and other functions regarding industrial security requirements.

Experience:

• Bachelor's degree in Cybersecurity, Information Systems, Information Technology, Security Management, or a related field of study, or equivalent applicable experience.
• Minimum eight (8) years of experience in a specialized functional discipline; OR twelve (12) years of experience may be considered in lieu of a Bachelor's degree; OR six (6) years of experience may be considered with a Master's degree; OR three (3) years of experience may be considered with a PhD.
• Experience managing classified information systems and implementing applicable U.S. Government information system security requirements.
• Knowledge of the National Industrial Security Program (NISP), 32 CFR Part 117 (NISPOM), DCSA requirements, and industrial security practices.
• Experience performing or supporting Facility Security Officer responsibilities within a cleared facility preferred.
• Experience with applicable government security systems and processes, such as DISS, NISS, NBIS, and eMASS, preferred.
• Ability to obtain and/or maintain the U.S. Government security clearance required for the position.