Facility Security Officer (FSO)

Description

The Facility Security Officer (FSO) / Federal Industrial Security Specialist position plays a critical role in ensuring Okta meets various Federal compliance requirements, particularly in Industrial Security. This individual will function as the Facility Security Officer (FSO) and Insider Threat Program Senior Official (ITPSO), reporting to the Senior Corporate Counsel, Public Sector and Regulated Products.

• Conduct security operations in accordance with 32 CFR Part 117 (NISPOM Rule), Intelligence Community Directives (ICD series), and other U.S. Government contract requirements and regulations.
• Provide day-to-day security administration and management, leading self-inspections and U.S. Government assessments.
• Guide employees and assure compliance with all U.S. Government and company security regulations.
• Communicate and collaborate daily with U.S. Government counterparts, company management, and program personnel in a collaborative environment.
• Ensure protection of classified information, oversight of personnel clearances, coordination with U.S. Government security agencies, and alignment of facilities, systems, and people with federally mandated security requirements.
• Manage and maintain personnel security clearances (PCLs), including submission, tracking, and periodic reinvestigations through DISS.
• Develop and deliver security training and briefings for cleared and uncleared personnel.
• Prepare for and respond to U.S. Government audits, inspections, and inquiries from the Defense Counterintelligence and Security Agency (DCSA), or other U.S. Government agencies, as applicable.
• Coordinate with leadership and program managers to ensure classified projects, processes, and internal and external communications follow required protocols.
• Maintain and implement security policies, standard operating procedures, and emergency response plans.
• Lead the Insider Threat Program for cleared Okta personnel.
• Oversee the security posture of Okta’s Federal business vertical, including physical, administrative, and information security practices.
• Collaborate cross-functionally to stand up and maintain a CUI protection program that achieves targeted goals for CMMC compliance.
• Review physical security policies and procedures to ensure compliance with new U.S. Government contracts.
• Work with Global trade compliance teams to ensure alignment with U.S. Government regulations.
• Maintain Okta’s Sam.gov registrations, and other U.S. Government registrations and filings as directed.
• Engage in Okta’s FedRAMP eligibility review process and other responsibilities associated with U.S. Public Sector and Highly Regulated Products.
• Administer day-to-day security operations of the Industrial Security program with support from Corporate management, implementing a security program that enables the business while complying with U.S. Government regulations.
• Support both collateral level DoD programs and function as CSSO for various U.S. Government contracts as needed.
• Make critical security decisions that help prevent unauthorized access to company and government facilities and information.
• Conduct security self-inspections, apply risk mitigation methodologies, support U.S. Government customer assessments, and implement security measures to meet requirements.
• Develop, maintain, and update company policies and procedures according to 32 CFR Part 117 (NISPOM Rule), DD254s, and contract requirements.
• Maintain Facility Clearance status in NISS and work with DCSA on required program and personnel documentation (KMP, self-inspections, SEAD 3 Reporting, etc.).
• Administer security clearances/access processes for new/existing employees, subcontractors, and consultants.
• Collaborate with organizations across Okta to align teams towards Federal compliance.

Qualifications

• 5+ years of experience in industrial security or a related role, including direct experience as an FSO or extensive experience as an Assistant FSO with demonstrated capability to take on the role of FSO.
• Experience as an ITPSO.
• Thorough working knowledge of the NISPOM Rule, ICDs, associated Executive Orders, and Security Executive Agent Directives (SEADs).
• Experience with the DISS/NBIS, NISS, SWFT, and other systems.
• Knowledge of OPSEC procedures and application of OPSEC to Sensitive U.S. Government information (FOUO, CUI).
• Completion of all ITPSO and FSO certification training from CDSE.
• Strong organizational and communication skills; ability to interface with internal stakeholders and U.S. Government agencies.
• U.S. Citizenship and ability to obtain and maintain a Secret and/or Top Secret security clearance.
• Experience working in or with a SaaS company.
• Preferred: Active Secret / TS-SCI clearance, experience establishing or scaling a security program within a startup or small business, familiarity with ITAR, EAR, and export compliance requirements, prior experience supporting autonomous systems, defense technology, or DoD research and development programs, relevant professional memberships (NCMS, etc.).