National Industrial Security Program Lead/Manager
ASTRION, INC.
Columbia, MD, United States
8 days ago
- Discuss this with your agent
- Open in Claude
- Open in ChatGPT
Apply on www.techcareers.com
Prepare application
- Draft this with your agent
- Open in Claude
- Open in ChatGPT
Role details
Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
8 years minimum
Compensation
$94,000.0 - $140,000.0
Working hours
Regular working hours
Job source
Tech stack
Configuration Management
Information Systems
Information Security Management
Information Technology
National Industrial Security Program Operating Manual (NISPOM)
Vulnerability Analysis
Job description
- NISP Compliance & Program Management: - Oversee the day-to-day administration of the facility’s industrial security program; interpret and implement 32 CFR Part 117, contract security requirements, DCSA guidance, and applicable government security policies and guidelines.
- Classified Information Protection: Establish and oversee controls for receipt, generation, access, handling, reproduction, transmission, storage, and disposition of classified information; this includes safeguarding areas, approved storage, combinations/credentials, and physical security controls
- Personnel Security: Ensure personnel have appropriate eligibility, access authorization, need-to-know, briefings, and debriefings to support the facility operations.
- Continuous Monitoring and Improvement Assess security risks, identify trends, recommend improvements to senior management, and ensure adequate security resources are available to meet the complexity and classified workload of the facility.
- Security Education & Training: Ensure personnel understand their responsibilities for safeguarding classified information and receive required initial, recurring/refresher, and termination/debriefing security training.
- Insider Threat: Coordinate with the Insider Threat Program Senior Official (ITPSO) and ensure security-program information relevant to insider threat is identified, reported, and integrated into the insider-threat program.
- Self-Inspections & Corrective Actions: Conduct or coordinate required self-inspections, identify vulnerabilities and deficiencies, develop corrective actions, brief management, and maintain supporting records.
- DCSA Interface: Serve as a principal facility contact for the servicing DCSA Industrial Security Representative, support DCSA security reviews/assessments, respond to findings, and maintain required records/documentation. DCSA notes that routine ISR engagement normally flows through the FSO.
- Security Procedures: Develop and maintain local Standard Practice Procedures (SPPs), SOPs, plans, and processes appropriate to the facility’s classified operations.
- Information Systems Collaboration and Coordination Coordinate with the Information System Security and Information Technology teams.
- Provide Security input for Security Plans, POA&Ms, and Configuration Management Plans.
- Security Incidents: Conduct inquires to actual or suspected loss, compromise, unauthorized disclosure, security violations, and other incidents; preserve relevant information, conduct required inquiries, report through appropriate channels, and implement corrective actions.
- Technical Advising - Advise program managers, system owners, and administrators on security implications of risk decisions.
- Security Reporting: Ensure proper reporting of adverse information, suspicious contacts, security incidents, foreign contacts/travel and other insider-threat indicators.
Requirements
- Bachelor’s degree with 8-10 years of experience.
- Must understand and implement 32 CFR Part 117 (NISPOM) and applicable DCSA requirements.
- Completion of FSO Program Management for Possessing Facilities
- Experience in supporting U.S. Government clients.
- Experience with Security Business Integrated Management Systems (i.e., Sign-In-Compliance, Sign-In Enterprise, SIMS, etc.)
- U.S. citizenship with active TS/SCI eligibility and the ability to maintain such eligibility., * Proficiency with DISS, NBIS, NISS, and related personnel/industrial security systems.
- Proficiency with DD Form 254 requirements and classified contracts/subcontracts.
- Knowledge of classified information handling, safeguarding, storage, transmission, destruction, and incident reporting requirements.
- Vulnerability assessment and remediation.
- Strong written and verbal communication skills, including the ability to train employees and advise program leadership.
- Excellent organization, attention to detail, discretion, and records-management skills.
- Prior experience as an FSO, AFSO, CPSO, security specialist, or industrial security professional in the defense/aerospace/government-contracting environment.
- Professional certifications such as ISP (Industrial Security Professional) or relevant CDSE training/certifications are a plus.
About the company
Astrion has an exciting opportunity for an experienced Security Professional to manage the day-to-day administration of the facility’s National Industrial Security Program. This position is full-time onsite in Columbia, Maryland.
Apply for this position
This job is hosted externally. Click below to view the full posting and apply.
Apply on www.techcareers.com
Prepare application
- Draft this with your agent
- Open in Claude
- Open in ChatGPT
Good distractions
Talks and stories from around this role — technically off-topic, practically not.
Moments
Explore playlistsVideos
See allRelated articles
See all
IK
Igor Khokhriakov
17 days ago
CH
Chris Heilmann
Dev Digest 134 - Where pixels sing?
almost 2 years ago
DC
Daniel Cranney
Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.
7 months ago
KD
Krissy Davis
Best Paying Jobs in Technology
about 3 years ago
AB
Andre Braun, GitLab
Now is the time for industrialized software development
about 1 year ago
MH
Michael Hunger
Everything a Developer Needs to Know About MCP with Neo4j
about 1 year ago