Position Summary

GPS Security Lead Specialist

Location: San Diego, CA

Deloitte is seeking an Assistant Facility Security Officer to administer the daily operations of the National Industrial Security Program (NISP), and implement procedures and controls to safeguard classified as well as special program information, as required. Key to success in this role includes the ability to implement NISP security operations with Controlled Unclassified Information (CUI) security requirements embedded in our federal contracts, related to federal client-designated CUI/sensitive information and personnel security program requirements.

What You'll Do:

• Manage and conduct NISP operations and support federal security team personnel affiliated with both Department of Defense/NISP User Agencies' contracts/clients as well as Intelligence Community programs/clients that includes both "access elsewhere" and "possessing facility" operational environments.
• Ensure compliance with DOD/Federal/Intelligence Community regulations that govern the critical security disciplines of both NISP/NISPOM and SCI classified contract-related security operations.
• Maintain cognizance and oversight of all NISP-affiliated or Sponsored classified networks and/or contracts, providing advisory and risk evaluations throughout the contract lifecycle in coordination with Federal Contracts and other Enabling Areas.
• Ensure subcontractors required for classified contract support are appropriately cleared and that the necessary contract security requirements are reflected in the subcontract documentation and include a properly executed DD254/Contract Security Classification Specification.
• Perform and support the personnel security program associated with NISPOM collateral clearances as well as SCI and special accesses, to include clearance/access nominations, visit authorization requests, mandatory reporting requirements, security training, debriefings, employee termination briefings, and facility/system badging/access control procedures (both client-related and internal to Deloitte for classified area access).
• Develop and deliver required NISP security awareness training courses for all cleared Deloitte professionals.
• Provide advisory and consultation to the San Diego FSO, Federal leadership, senior management, project managers, and engagement team members.
• Report all security violations and compromises/potential compromises of classified information to the San Diego FSO.
• Conduct security-related liaison activities with external (client) customers/Government security officials, internal (Deloitte) Federal leadership, and Enabling Areas (Federal Contracts, Recruiting and Talent, as necessary.
• Review, coordinate, publish (and amend, as needed) security program governance documentation e.g., policies, procedures, Standard Practice Procedures (SPP) manuals, Technology Control Plans, and Systems Security Plans.
• Support DCSA security reviews and self-inspections to ensure continued compliance with the NISPOM and to mitigate any gaps.
• Develop and deliver standard operating procedures to support foreign travel and foreign contact reporting, ensuring compliance with 32 CFR, Part 117, and SEAD 3 and 4, and working closely with the ITPSO and Security leadership.
• Manage foreign travel notifications and interview individuals to assess potential threats, while providing firm and government guidance and regulations, and completing proper escalation as needed.
• Manage and report Foreign Travel and Foreign Contacts within the Defense Information System for Security (DISS).
• Perform other related duties as required, necessary or directed to assure a comprehensive and viable security program within the guidelines of the NISPOM and/or DOD/Federal/Intelligence Community regulations.

• Active Top Secret clearance. Be able to obtain/maintain Top Secret/SCI clearance, as required.
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future
• A minimum of 3 years technical program management experience as an AFSO, FSO, SSO, CSSO, or other relative security experience.
• Strategic thinker, creative problem-solver, and decision-maker; ability to find innovative, thoughtful solutions to a range of business problems
• Strong working knowledge of National Industrial Security Program Operating Manual (NISPOM), DOD personnel and information security regulations, information systems security program requirements, Intelligence Community Directives (ICDs), and other related Federal security laws, directives and regulations. [Knowledge of DoD and Federal Agencies controlled unclassified information (CUI)/sensitive information security requirements, preferred.]
• Proficiency with business technologies such as Microsoft Office Suite tools and Zoom.
• Demonstrated knowledge of Defense Information System for Security (DISS) and the National Industrial Security System (NISS).
• Effective/demonstrated customer relationship skills, with an understanding of compliance and business partner balance.
• Effective presentation and public speaking skills and experience; demonstrated development and delivery of training programs (tailored to specific client needs) is essential.
• Effective written communication skills, able to span interactions with all levels of professionals within the organization (cleared employees, program teams, and Deloitte leadership)..

• Bachelor's Degree, Advanced Degree with Security Specialization, ISP® Certification.
• Completion of FSO for possessing facilities certification-related courses and training (or Industrial Security Professional/NCMS certification).
• Experience in physical and facilities security program management to include accreditation policies and processes associated with both NISP secured areas and SCIF environments.
• 3+ years of experience working in a security team environment that is rapid-response, customer-focused and results-driven.
• Demonstrated knowledge of the National Background Investigation Services (NBIS) or Scattered Castles.• Prior experience in COMSEC administration, SAP program management, adverse incident handling, or reviewing DD254/Contract Security Classification Specification