Facility Security Officer

About the role

Stratolaunch is a technology accelerator that engineers operationally realistic testing at Mach 5+. Our air-launched, Talon testbeds are reusable, cost-effective platforms that enable routine access to the hypersonic environment. We deliver flight data critical to validating system performance and achieving rapid technology deployment. Together with our customers, we drive innovations imperative to advancing national security.

The Facility Security Officer (FSO) is responsible for developing, implementing, and maintaining the security program to ensure all departments and team members comply with internal policies and procedures as well as government regulations, customer contracts, and other applicable standards. The FSO will lead Stratolaunch through the facility clearance process and build and manage the security program, including physical and cyber security, visitor control, security clearance processing, classification management, asset protection, and control. The FSO will provide measurable input to company processes and standards to achieve security objectives and align security objectives with business objectives, applying the appropriate risk management framework to achieve overall company success.

Responsibilities

• Implement a security Governance, Risk Management, and Compliance (GRC) program to adhere to all contractual and government requirements, including:
  • National Institute of Standards and Technology (NIST) SP800-171 publications
  • DoD 5220.22, National Industrial Security Program (NISPM)
  • DoD 5220.22-M, NISP Operating Manual (NISPOM)
  • JAFANs
  • ICDs
  • DD254 forms provided by the Government and/or prime contractors
• Supervise and direct security measures necessary for implementing applicable requirements of the NISPOM and related Federal requirements for classified information.
• Implement, track, and manage a robust security program at Stratolaunch, ensuring compliance with industry standards, best practices, and Government flow-downs.
• Support all functions of the security department, including: training, risk identification, visit authorization, contractual documentation coordination, and foreign visitor procedures/access.
• Apply industrial security standards related to document handling and custodial duties; JPAS; ISFD; STEPP; NISS corporate and government installations; visitor group security administration; and security planning for classified meetings and conferences.
• Coordinate, communicate, and cooperate with DoD, DSS, NISP, DISCO, DOHA, and federal investigators to ensure timely processing of employee documents and requests.
• Write and articulate security plans, including Standard Operating Procedures, Security Processes, and Security Policies.
• Develop, maintain, and monitor adherence with company security policies and procedures, including inspections with DSS, DoD, and other mandates.
• Plan and instruct in-house security education programs, including proper destruction and keeping of classified data.
• Ensure all appropriate personnel have attended security education programs and sufficient and auditable documentation is maintained and accessible.
• Develop, implement, and manage security requirements in support of the NISP and other security programs.
• Keep company leadership informed of any suspected compromise to security systems.
• Own responsibility for physical security of assets, including data, visitor management, access control, alarm accesses, and semi-annual testing with vendors.
• Lead Corporate Insider Threat Program as the Insider Threat Program Senior Official (ITPSO).
• Document and keep detailed records on documents entrusted to Stratolaunch, including conformance with internal document and retention repository schedules or requirements.
• Provide derivative classification services to ensure adequate levels of document and classification legends are utilized on documents.
• Analyze and maintain appropriate levels of controls for security documents and manuals.
• Ensure adequate and working controls (e.g., badging, locks, scanners, authentication) adequately secure all company perimeter and rooms holding assets and data requiring additional protection.
• Perform and report on results of periodic inspections of Stratolaunch’s facilities and their perimeters aimed at identifying security or safety incidents, anomalies, breaches, etc.
• Ensure effective systems are in place that monitor and control access to facilities.
• Identify, assess, and evaluate risks through reviews, complaints, and other data points, producing risk reports for company leadership.
• Assist in preparation of emergency management and contingency planning.
• Proactively conduct, supervise, and prepare reports relating to internal investigations of any suspected losses or violations of company regulations, policies, and procedures.
• Assist in the implementation and administration of security systems.
• Maintain records for periodic secure systems inspections with customer liaisons and other technical professionals.
• Develop and align a Risk Management Program with Senior Management.
• Ensure all Key Management Personnel are aware of their security responsibilities.
• Keep abreast with all changes in policy and regulations.
• Align security with Stratolaunch ITAR office and develop Technology Control Plans (TCP) as necessary.
• Ensure appropriate support is given to Controlled Unclassified Information (CUI).
• Align Security Objectives with Business Objectives.
• Assist Senior Management with developing a security budget to address hardware, software, and personnel needs.
• Assist Senior Management with the ability to seek outside consultants if needed.

Requirements

• Expert security knowledge and 8+ years of experience addressing Special Access Program (SAP) and Sensitive Compartmented Information (SCI) administration (even if FSO’s clearance may not be at that access level).
• Security Professional Education Development (SPED) or Industrial Security Professional (ISP) certification preferred.
• Must provide annual Security Training, Education, and Professionalization Portal (STEPP) Training Transcript showing successful completion of the FSO Non-Possessing Facilities Curriculum.
• Strong understanding and 5+ years of experience utilizing security procedures and security clearance processes.
• Proven experience resolving security and/or clearance problems effectively.
• Proven experience supporting security requirements as a prime contractor and ensuring subcontractor security requirements are flowed down and met.
• Experience with DD254's and the coordination of clearances (including verification of clearances) with prime and subcontractor security departments.
• Experience in oversight of document control, physical security, and badging/access control systems.
• Experience with Access Commander and/or other security databases.
• Outstanding judgment and flexibility.
• Ability to read, analyze, and interpret technical, operations, financial, HR, and other procedures as well as contracts, documents, government regulations, qualification and test reports, etc.
• Ability to develop and present business presentations, reports, and correspondence.
• Resilient self-starter, able to work independently, comfortable with ambiguity, and committed to leading, collaborating, and partnering to deliver results.
• Ability to maintain utmost confidentiality of sensitive information.
• Able to handle multiple and competing priorities and deadlines in a fast-paced environment with high attention to detail.
• Demonstrated decision-making and creative problem-solving skills.
• Understanding of DoD 8570.
• Must be a US Citizen to qualify.
• Must have or be able to gain a top secret clearance. TS/SCI with poly preferred.
• BA or BS degree or 4 additional years of work experience.
• 5+ years as a FSO.
• 5+ years of physical security experience.
• 8+ years of proven experience administering security clearance levels including Top Secret status or 8+ years of applicable proven security clearance administration or specialized security certification.
• Experience writing, implementing, and enforcing policies and procedures in accordance with NIST, JAFAN, and ICD.

Preferred Qualifications

• Program Security Officer’s Launch Course.
• Security+ certification.
• 2+ years as a COMSEC Custodian.
• 1+ year experience with Information Assurance and System Security Plans.
• Experience with Program Protection Methodologies.

Pay

$185,000-$205,000 Base salary and leveling are established on a case-by-case basis. We consider several factors to ensure a competitive offer, including your location, educational background, and a comprehensive assessment of the skills and experience demonstrated during your interviews.

Schedule

9/80 schedule.

Benefits

• Healthcare (medical, dental, vision, prescription drugs).
• Paid Maternity and Parental Leave.
• 50% company match per contributed dollar into 401(k) savings plan, up to $11,500.
• Tuition reimbursement.

Location

This position may involve the operation of company vehicles as part of assigned duties. Position is based in Mojave, CA or Huntsville, AL.

Mojave Air & Spaceport is located just outside of Lancaster/Palmdale and is only 95 miles north of Los Angeles. The area offers both affordability and central access to a variety of California's best attractions and landmarks. For those who prefer city life, you’re within a half day’s drive or less of Los Angeles, San Diego, Las Vegas, and San Francisco, where you can find live entertainment, museums, tours, and historical sight-seeing. Theme parks such as Six Flags Magic Mountain, Disneyland, and Knott’s Berry Farm are also accessible. The region is a haven for food and drink enthusiasts, with easy access to some of California’s best wine regions and a variety of local breweries.