National Industrial Security Program Lead/Manager

Overview National Industrial Security Program Lead/Manager LOCATION: Columbia, MD JOB STATUS: Full-time CLEARANCE: Active TS/SCI CERTIFICATION: FSO Program Management for Possessing Facilities TRAVEL: Less than 5%

SALARY RANGE: $94K - $140K

Astrion has an exciting opportunity for an experienced Security Professional to manage the day-to-day administration of the facility's National Industrial Security Program. This position is full-time onsite in Columbia, Maryland.

REQUIRED QUALIFICATIONS / SKILLS

Bachelor’s degree with 8-10 years of experience. Must understand and implement 32 CFR Part 117 (NISPOM) and applicable DCSA requirements. Completion of FSO Program Management for Possessing Facilities Experience in supporting U.S. Government clients. Experience with Security Business Integrated Management Systems (i.e., Sign-In-Compliance, Sign-In Enterprise, SIMS, etc.) U.S. citizenship with active TS/SCI eligibility and the ability to maintain such eligibility.

PREFERRED QUALIFICATIONS / SKILLS

Proficiency with DISS, NBIS, NISS, and related personnel/industrial security systems. Proficiency with DD Form 254 requirements and classified contracts/subcontracts. Knowledge of classified information handling, safeguarding, storage, transmission, destruction, and incident reporting requirements. Vulnerability assessment and remediation. Strong written and verbal communication skills, including the ability to train employees and advise program leadership. Excellent organization, attention to detail, discretion, and records-management skills. Prior experience as an FSO, AFSO, CPSO, security specialist, or industrial security professional in the defense/aerospace/government-contracting environment. Professional certifications such as ISP (Industrial Security Professional) or relevant CDSE training/certifications are a plus.

RESPONSIBILITES:

NISP Compliance & Program Management: – Oversee the day-to-day administration of the facility's industrial security program; interpret and implement 32 CFR Part 117, contract security requirements, DCSA guidance, and applicable government security policies and guidelines. Classified Information Protection: Establish and oversee controls for receipt, generation, access, handling, reproduction, transmission, storage, and disposition of classified information; this includes safeguarding areas, approved storage, combinations/credentials, and physical security controls Personnel Security: Ensure personnel have appropriate eligibility, access authorization, need-to-know, briefings, and debriefings to support the facility operations. Continuous Monitoring and Improvement: Assess security risks, identify trends, recommend improvements to senior management, and ensure adequate security resources are available to meet the complexity and classified workload of the facility. Security Education & Training: Ensure personnel understand their responsibilities for safeguarding classified information and receive required initial, recurring/refresher, and termination/debriefing security training. Insider Threat: Coordinate with the Insider Threat Program Senior Official (ITPSO) and ensure security-program information relevant to insider threat is identified, reported, and integrated into the insider-threat program. Self-Inspections & Corrective Actions: Conduct or coordinate required self-inspections, identify vulnerabilities and deficiencies, develop corrective actions, brief management, and maintain supporting records. DCSA Interface: Serve as a principal facility contact for the servicing DCSA Industrial Security Representative, support DCSA security reviews/assessments, respond to findings, and maintain required records/documentation. DCSA notes that routine ISR engagement normally flows through the FSO. Security Procedures: Develop and maintain local Standard Practice Procedures (SPPs), SOPs, plans, and processes appropriate to the facility's classified operations. Information Systems Collaboration and Coordination: Coordinate with the Information System Security and Information Technology teams. Provide Security input for Security Plans, POA&Ms, and Configuration Management Plans. Security Incidents: Conduct inquires to actual or suspected loss, compromise, unauthorized disclosure, security violations, and other incidents; preserve relevant information, conduct required inquiries, report through appropriate channels, and implement corrective actions. Technical Advising - Advise program managers, system owners, and administrators on security implications of risk decisions. Security Reporting: Ensure proper reporting of adverse information, suspicious contacts, security incidents, foreign contacts/travel and other insider-threat indicators. #J-18808-Ljbffr Astrion