Facility Security Officer (FSO)/ Insider Threat Program Senior Official (ITPSO)

Position Summary

The Facility Security Officer (FSO) / Insider Threat Program Senior Official (ITPSO) is responsible for the administration, implementation, oversight, and continuous improvement of the organization's industrial security and insider threat programs. This position ensures compliance with the National Industrial Security Program Operating Manual (NISPOM), 32 CFR Part 117, Defense Counterintelligence and Security Agency (DCSA) requirements, Security Executive Agent Directives (SEADs), and applicable Department of War (DoW), Intelligence Community (IC), and government customer security directives.

The FSO/ITPSO serves as a primary security authority for assigned cleared facilities and is responsible for managing personnel security, classified information protection, security education and awareness, incident reporting, government inspections, and industrial security compliance.

In the capacity of ITPSO, the individual is responsible for implementing and administering a comprehensive insider threat program designed to identify, assess, report, and mitigate potential insider threats to classified information, personnel, facilities, systems, and national security interests.

Working closely with the Director of Security, executive leadership, Information Technology, Human Resources, Legal, FSOs, CSSOs, CPSOs, and government security representatives, this position ensures security programs are compliant, proactive, scalable, and aligned with organizational mission requirements.

The ideal candidate is a highly experienced, solutions-oriented security professional who demonstrates strong regulatory knowledge, sound judgment, exceptional interpersonal skills, and the ability to balance security requirements with operational objectives.

Role Expectations

Industrial Security Program Management

• Serve as the designated FSO for assigned cleared facilities and CAGE codes, ensuring compliance with 32 CFR Part 117 and applicable government security requirements.
• Develop, implement, maintain, and continuously improve the organization's industrial security program.
• Establish and maintain Standard Practice and Procedures (SPP), security policies, operating procedures, and compliance documentation.
• Administer security requirements associated with the organization's Facility Clearance (FCL), including coordination with DCSA.
• Maintain organizational information and required facility records in the National Industrial Security System (NISS).
• Ensure applicable Key Management Personnel (KMP) are appropriately documented, processed, and maintained.
• Oversee compliance with classified contract security requirements, including DD Form 254 review, interpretation, and administration.
• Coordinate security requirements associated with new contract awards, subcontractors, facility changes, and organizational growth.
• Conduct periodic assessments of security processes to identify vulnerabilities, inefficiencies, and opportunities for improvement.
• Advise the Director of Security and executive leadership on regulatory requirements, emerging security risks, and recommended mitigation strategies.
• Support security standardization across multiple facilities and CAGE codes operating under a Multiple Facility Organization (MFO), when applicable.

Insider Threat Program Management and Oversight

• Serve as the formally appointed Insider Threat Program Senior Official (ITPSO) for assigned cleared entities.
• Develop, implement, and maintain a written Insider Threat Program Plan compliant with 32 CFR 117.7 and applicable DCSA guidance.
• Ensure the Insider Threat Program addresses the identification, assessment, reporting, and mitigation of potential insider threat indicators.
• Establish and lead an Insider Threat Working Group (ITWG) or equivalent cross-functional coordination structure involving Security, Human Resources, Information Technology, Legal, and other appropriate stakeholders.
• Coordinate the lawful and authorized collection, evaluation, and integration of relevant insider threat information from appropriate organizational sources.
• Establish procedures for identifying, documenting, escalating, and reporting potential insider threat indicators.
• Coordinate with the FSO, Director of Security, and government authorities regarding reportable information and security concerns.
• Ensure timely reporting of applicable insider threat information and adverse information through required government channels.
• Maintain insider threat records and documentation in accordance with applicable legal, privacy, retention, and government requirements.
• Develop and deliver initial and annual insider threat awareness training.
• Ensure personnel assigned insider threat program responsibilities receive appropriate role-specific training.
• Conduct periodic insider threat program effectiveness reviews and implement improvements.
• Support DCSA insider threat program assessments, inspections, and corrective action activities.
• Promote a security culture that encourages responsible reporting, employee awareness, and early identification of concerning behaviors while protecting individual privacy and due process.

Security Compliance, Self-Inspections, and DCSA Assessments

• Plan, coordinate, and execute required annual security self-inspections.
• Develop and maintain security inspection checklists, compliance assessment tools, and supporting documentation.
• Prepare assigned facilities for DCSA security reviews, vulnerability assessments, and other government inspections.
• Coordinate employee interviews, document reviews, and inspection activities with DCSA representatives.
• Identify compliance deficiencies and develop corrective action plans with defined responsibilities and completion milestones.
• Monitor corrective action implementation and validate resolution of identified deficiencies.
• Prepare security compliance reports, self-inspection summaries, and management briefings.
• Support Senior Management Official (SMO) self-inspection certification requirements.
• Maintain inspection readiness through continuous monitoring, process improvement, and personnel training.
• Monitor changes in NISPOM, DCSA guidance, and government directives to ensure timely updates to internal security processes.

Classified Information Protection and Security Operations

• Oversee administrative security requirements associated with the receipt, handling, safeguarding, transmission, reproduction, and destruction of classified information.
• Ensure classified information is accessed only by authorized personnel with appropriate eligibility, access authorization, and need-to-know.
• Coordinate classified material accountability and document control procedures where applicable.
• Ensure approved classified storage and safeguarding practices are implemented and maintained.
• Collaborate with physical security personnel to address facility security requirements, access control, and safeguarding concerns.
• Coordinate classified visits and government security inspections.
• Support classified information incident response, preliminary inquiries, and required reporting.
• Ensure security violations and potential compromises are appropriately documented, escalated, and reported.
• Maintain coordination with program security personnel regarding collateral, SCI, and SAP security responsibilities, as applicable.
• Collaborate with ISSMs and cybersecurity teams to align industrial security operations with system security plans (SSPs) and continuous monitoring requirements.

Security Education, Training, and Awareness (SETA)

• Develop, implement, and maintain a comprehensive Security Education, Training, and Awareness Program.
• Conduct initial security briefings, annual refresher training, insider threat awareness training, and specialized security training.
• Ensure training addresses applicable NISPOM, SEAD 3, insider threat, classified information protection, and organizational reporting requirements.
• Develop training materials, employee notifications, awareness campaigns, and security guidance.
• Track completion of required security training and maintain supporting documentation.
• Identify knowledge gaps and recommend targeted security education initiatives.
• Promote a positive security culture emphasizing accountability, awareness, collaboration, and mission support.

Security Incident Management and Reporting

• Manage the identification, documentation, assessment, escalation, and reporting of security incidents.
• Conduct or coordinate preliminary inquiries into suspected security violations, potential compromises, and reportable security concerns.
• Determine appropriate reporting and escalation requirements in coordination with authorized security leadership and government representatives.
• Ensure required reports are submitted within applicable regulatory and customer-directed timelines.
• Develop corrective actions and recommend measures to prevent recurrence.
• Maintain security incident documentation and track resolution activities.
• Coordinate with Human Resources, Legal, Information Technology, and leadership when incidents involve multiple organizational functions.
• Support the implementation of graduated disciplinary procedures consistent with organizational policy and applicable legal requirements.

Required Qualifications

Education and Experience

• Bachelor's degree or equivalent combination of education and experience.
• 10+ years of industrial security experience supporting cleared federal contractors.
• Prior experience serving as an FSO, Assistant FSO, Senior Industrial Security Specialist, or comparable security program lead.
• Demonstrated knowledge of 32 CFR Part 117, NISPOM, DCSA requirements, and applicable Security Executive Agent Directives.
• Experience developing, administering, or providing substantial support to an insider threat program.
• Demonstrated experience preparing for and supporting DCSA security assessments and annual self-inspections.
• Proficiency with DISS, NISS, NBIS, and related government personnel and facility security systems.
• Experience administering personnel security processes and security reporting requirements.
• Demonstrated ability to interpret regulatory requirements and translate them into practical policies and procedures.
• Experience developing and maintaining SPPs, security plans, training programs, and compliance documentation.
• Strong organizational, analytical, problem-solving, and project management capabilities.
• Excellent written and verbal communication skills.
• Demonstrated ability to manage sensitive information with discretion, professionalism, and sound judgment.
• Ability to work independently, prioritize competing requirements, and provide effective security support in a fast-paced environment.

Security Clearance

• Active Top Secret security clearance required.
• Current SCI eligibility and/or access strongly preferred.
• Ability to obtain and maintain required customer-specific accesses.

Training Requirements

• Completion of applicable DCSA FSO Certification, or ability to complete required training within 6 months.
• Completion of required DCSA ITPSO training before assuming appointment duties, in accordance with applicable NISPOM requirements.
• Ability to complete additional government or customer-directed training.

Salary Range: $133,500 - 227000