Director, Facility Security Officer

About the role

The Director, Facility Security Officer (FSO) serves as the principal security advisor to CPS’s Government Security Committee (GSC) and the company's primary interface with the Defense Counterintelligence and Security Agency (DCSA) and other cognizant security authorities. The role also involves developing, implementing, and ensuring compliance with the Insider Threat Program and being the designated FSO and Insider Threat Security Officer (ITPSO).

Responsibilities

• FOCI Compliance and Proxy Agreement Execution
• Serve as principal advisor to the GSC on all matters related to the PA compliance and any other applicable matters.
• Maintain and enforce all obligations under the approved PA and APO, including visit controls, the Electronic Communications Plan, and the Technology Control Plan.
• Serve as the primary point of contact with DCSA for all matters related to facility clearances, annual compliance reporting, and all FOCI mitigation oversight.
• Review and approve all affiliate contacts, visits and communications between CPS and the parent company in accordance with the approved visit controls procedures.
• Develop and maintain a FOCI mitigation instrument (Security Control Agreement, Special Security Agreement, or equivalent) in coordination with outside counsel on FOCI mitigation matters and any open compliance questions.
• Establish and maintain all required DSS/DCSA-mandated records, plans, and programs.
• Administer personnel security clearance processing end-to-end via JPAS/DISS, including nominations, investigations, and visit certifications.
• Advise employees and managers on clearance eligibility, adjudicative guidelines, and ongoing reporting obligations.
• Maintain a current and accurate roster of cleared personnel and access authorizations.
• Lead Collibra's Insider Threat Program, including a multi-disciplinary hub and reporting mechanisms.
• Develop and deliver annual and ongoing security education and awareness training for cleared and uncleared personnel.
• Conduct self-inspection programs and prepare for DCSA facility reviews and annual compliance audits.
• Serve as a trusted advisor to the General Manager and the GSC senior leadership on all security and compliance matters related to the government business.
• Partner with independent legal counsel on export control compliance, including ITAR/EAR obligations as they intersect with CPS's products and services.
• Support contract compliance and bid activities requiring security documentation or clearance certifications.
• Cook up incident investigations involving potential unauthorized disclosure, fraud, or insider threat, and ensure prompt reporting to GSC and DCSA as required.

Requirements

• 8+ years of experience as a Facility Security Officer or in a substantially similar industrial security role within a cleared defense contractor environment.
• Deep working knowledge of the NISPOM (32 CFR Part 117), DAAPM/Risk Management Framework, and DCSA oversight processes.
• Demonstrated experience managing or supporting FOCI mitigation instruments (PA, Security Control Agreement (SCA), Special Security Agreement (SSA), or equivalent). Experience with proxy-agreement structures specifically is strongly preferred.
• Proficiency with JPAS, DISS, and eQIP/SF-86 processing.
• Active U.S. Government security clearance (Top Secret required); ability to obtain and maintain clearance at the level required for the role.
• Demonstrated ability to operate independently and to enforce compliance boundaries with affiliate and parent company personnel.
• Bachelor's degree in a related field, or equivalent combination of education and experience.
• Experience in a FOCI-mitigated environment at a commercial software or technology company, particularly one with active DSCA oversight.
• Demonstrated proficiency in leveraging AI tools (e.g., Claude, Gemini, ChatGPT, Copilot) to solve real-world business challenges, drive measurable outcomes, or streamline workflows.
• Familiarity with ITAR/EAR export control compliance as applied to software and SaaS products.
• Industrial Security Professional (ISP) or similar certification.
• Experience managing COMSEC accounts or working in a multi-facility environment.

Qualifications

• Deep fluency in FOCI mitigation frameworks, familiar with applying Proxy Agreement or Security Control Agreement structures to day-to-day operational decisions, including managing visit controls, affiliate communications, and annual DCSA reporting obligations.
• A trusted cross-functional partner, working naturally alongside legal counsel, General Managers, and executive governance bodies like a GSC, translating dense regulatory requirements into clear guidance that non-security stakeholders can act on.
• Familiar with applying export control frameworks to technology products, understanding how ITAR and EAR obligations intersect with software or SaaS environments and partnering with counsel to ensure compliance without blocking the business from operating effectively.

Skills

• Compliance enforcement and strong leadership skills.
• Independent operation and self-direction.
• Proven ability to hold firm on security boundaries, even when it creates friction with senior stakeholders or affiliate personnel.
• Strong interpersonal and communication skills, especially in a cross-functional environment.
• Ability to lead and manage a program end-to-end without a security team beneath you.
• Experience in a FOCI-mitigated environment at a commercial software or technology company.
• Proficiency with AI tools and export control compliance.

Benefits

Collibra offers a competitive total rewards package, including a standard base salary range of $184,000.00 - $230,000.00 per year, a Flex Fund monthly stipend, pension/401k plans, and more. The company is committed to creating an inclusive and belonging workplace, and provides equal opportunity employment opportunities without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, sexual orientation, pregnancy, sex, gender identity, gender expression, genetic information, physical or mental disability, HIV status, registered domestic partner status, caregiver status, marital status, veteran or military status, citizenship status, or any other legally protected category.