security compliance manager

Mustang Survival Mfg

<div><div><div><b>WHO WE ARE</b></div></div><div><div>
The Wing Group is a global leader in engineered solutions for demanding environments, bringing together a portfolio of trusted brands including Wing Inflatables, Mustang Survival, Henshaw Inflatables, Patten Company, and FabTek Industries. Across defense, marine safety, law enforcement, and industrial sectors, we design and manufacture mission-critical inflatable, flotation, and survival solutions that professionals trust to perform when it matters most.</div></div><div><div>
From combat-ready rigid inflatable boats and inflatable structures to life-saving flotation devices and marine apparel, our products are engineered and tested to exceed the highest standards of safety, durability, and performance. With U.S. and Canadian-based manufacturing and a collaborative, hands-on culture, The Wing Group delivers purpose-built solutions for the world&rsquo;s toughest environments. Join us in advancing safety, performance, and innovation&mdash;on the water and beyond.</div></div><p>
</p><div><div><b>WHAT WE OFFER</b></div></div><ul><li><div>
Comprehensive benefits package, including health and dental coverage.</div></li><li><div>
A collaborative and supportive culture within a trusted, market-leading organization.</div></li><li><div>
Opportunities to make a meaningful impact by driving growth and innovation in a dynamic and evolving industry to save lives.</div></li></ul><p>
</p><div><div><b>WHAT WE ARE LOOKING FOR</b></div></div><div><div>
This role provides strategic oversight and direction over the company&rsquo;s compliance in multiple information control domains. The position will manage and lead the implementation of CMMC L2. This role ensures all processes meet regulatory standards, coordinating with cross-functional teams to create a sustainable and resilient CMMC L2 compliance implementation.</div></div><p>
</p><div><div><b>RESPONSIBILITIES
</b></div></div><div><div>To perform this job successfully, an individual must be able to perform essential duties satisfactorily. The essential functions include, but are not limited to the following:</div></div><ul><li><div>
Create and implement sustainable and resilient CMMC compliance processes throughout the organization.</div></li><li><div>
Discover and document data flows throughout the organization, supporting security protocols and regulatory requirements.</div></li><li><div>
Develop technical solutions to implement required controls</div></li><li><div>
Project manage CMMC implementation</div></li><li><div>
Improve vendor and customer facing documentation and contracts to ensure flow-down compliance requirements are included</div></li><li><div>
Administer and oversee security-related training programs within the LMS (Learning Management System), ensuring up-to-date content that complies with organizational and regulatory standards.</div></li><li><div>
Conduct regular audits of information systems to verify adherence to security controls, identify non-compliance issues, and track corrective actions.</div></li><li><div>
Develop security-related policies, guidance, and procedure documentation.</div></li><li><div>
Work with consultants and 3rd party auditors to achieve CMMC L2 compliance.</div></li></ul><ul><li>
Must be a U.S. citizen</li><li>
2-4 years of experience in the field of organizational change management and transformation, implementing complex frameworks or standards.</li><li>
Relevant diploma, such as Law, Business Administration, Risk Management, Political Science.</li><li>
On site or able to travel at least 50% to major offices in Jacksonville FL, Arcata CA, Burnaby, BC, Canada.</li></ul></div>

Security Compliance Manager

emaratech

<div>
 Role Overview
 <br/>
 <br/>
 The Information Security Risk and Compliance (Governance, Risk, and Compliance) Manager implements and maintains frameworks to manage security risks, ensure regulatory compliance, and enforce security policies. He / She is responsible to:
 <br/>
 <br/>
 <ul>
  <li>
   oversee audits, manage third-party risks, and report to senior management on the security posture
  </li>
  <li>
   ensuring the effective implementation and continuous improvement of the Information Security Management System (ISMS), PCI DSS compliance, and UAE Central Bank (CBUAE) regulatory requirements
   <br/>
   <br/>
  </li>
 </ul>
 The role is responsible for strengthening security governance, managing enterprise security risks, maintaining regulatory compliance, and supporting executive oversight of cybersecurity programs across all group entities.
 <br/>
 <br/>
 <strong>
  Key Responsibilities
  <br/>
  <br/>
 </strong>
 <strong>
  Governance, Policy &amp; ISMS
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Responsible for overseeing the execution of the GRC program in collaboration with the executive team as well as maintaining the group's library of security controls
  </li>
  <li>
   Lead the implementation, maintenance, and continuous improvement of the Group ISMS aligned with ISO/IEC 27001 standards
  </li>
  <li>
   Develop, update, implement, and maintain information security policies, standards, and procedures
  </li>
  <li>
   Ensure consistent implementation of information security governance across the group
  </li>
  <li>
   Develop goals for data privacy based on legal regulations and other compliance needs, designs and implement privacy policies and practices, and assess these practices for effectiveness
  </li>
  <li>
   Update security controls and provide support to all stakeholders on security controls covering internal assessments, laws, and regulations
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  PCI DSS Compliance
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Manage the organization's PCI DSS compliance program, including scope definition, risk assessments, and coordination with Qualified Security Assessors (QSAs)
  </li>
  <li>
   Track remediation activities and ensure continuous compliance with PCI DSS requirements
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  CBUAE Regulatory Compliance
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Ensure compliance with UAE Central Bank (CBUAE) information security and risk management regulations
  </li>
  <li>
   Monitor regulatory updates and assess their impact on the organization
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Risk Management
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Identify, assess, evaluate, and mitigate IT Security risks by conducting information security risk assessments and maintain centralized risk registers
  </li>
  <li>
   Track risk mitigation actions and report the security risk posture to management
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Audit &amp; Compliance Management
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Ensure compliance with legal, regulatory, and contractual requirements
  </li>
  <li>
   Coordinate internal audits, external certification audits, and regulatory assessments (ISO 27001, ISO 27005, NIST, PCI DSS, etc.)
  </li>
  <li>
   Track audit findings and ensure timely remediation and closure
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Security Awareness &amp; Training
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Oversee organization-wide security awareness and compliance training programs
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Requirements
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor's degree in:
  </li>
  <li>
   Engineering
  </li>
  <li>
   Information Security
  </li>
  <li>
   Computer Science
  </li>
  <li>
   IT Risk Management or a related discipline
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Experience &amp; Skills
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   8-12 years of experience in Cybersecurity, Information Security Governance, Risk Management and Compliance Audit
  </li>
  <li>
   Deep understanding of frameworks like ISO 27001, PCI-DSS, DESC ISR, etc
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Certifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   CISSP
  </li>
  <li>
   CISM
  </li>
  <li>
   CISA
  </li>
  <li>
   CRISC
  </li>
  <li>
   ISO 27001 Lead Implementer / Lead Auditor
  </li>
 </ul>
</div>


Information Security Risk & Compliance Manager

REPKON USA

<div><div>Job Title: M365 Cloud Security &amp; Compliance Manager</div>
<div>Company: REPKON USA</div>
<div>Job Family: IT</div>
<div>Location: Tampa, FL &ndash; On Site</div>
<div>Job Type: Full-Time</div>
<div></div><div>Job Summary:</div>
<div>We are seeking a highly skilled and motivated a Microsoft 365 Cloud Security &amp; Compliance Manager to join our growing IT and cybersecurity team. This individual will be responsible for implementing, managing, and monitoring Microsoft 365 and Azure security solutions, with a strong focus on compliance frameworks such as NIST 800-171 and CMMC Level 2. The ideal candidate has 6+ years of hands-on experience in M365 cloud security, endpoint protection, and compliance in a defense contractor or similarly regulated environment.</div>
<div></div><div>Key Responsibilities:</div>
<div>Security Operations &amp; Architecture</div>
<ul><li>Manage the administration and optimization of Microsoft 365 Defender, Microsoft Defender for Endpoint, Defender for Identity, and Defender for Office 365</li>
<li>Configure and manage Microsoft Intune for secure endpoint management, application protection policies, and device compliance</li>
<li>Develop and manage Microsoft Sentinel workbooks, analytics rules, and playbooks for security incident response and automation</li>
<li>Implement Azure AD Conditional Access, MFA policies, role-based access control (RBAC), and Identity Protection</li>
</ul><div>Cloud Security &amp; Governance</div>
<ul><li>Manage and audit Azure Security Center, Microsoft Purview, Compliance Manager, and M365 Security Center</li>
<li>Lead and conduct regular security baselines, risk assessments, and vulnerability scans</li>
<li>Create and maintain policies for data loss prevention (DLP), information protection, and compliance reporting</li>
<li>Experience in Azure networking include creating VMs, AVD, NSG.</li>
</ul><div>Compliance &amp; Framework Alignment</div>
<ul><li>Support internal/external audits and assessments related to NIST 800-171, CMMC, and DFARS</li>
<li>Maintain compliance evidence repositories and remediation documentation</li>
<li>Assist in SSP, POA&amp;M, and security control implementation documentation</li>
</ul> <div>Collaboration &amp; Incident Response</div>
<ul><li>Work with IT, DevOps, and Compliance teams to support secure deployment practices</li>
<li>Investigate security incidents and assist in root cause analysis and response</li>
<li>Develop SOPs, runbooks, and training materials for internal security awareness</li>
</ul><div>Qualifications:</div>
<div>Required:</div>
<ul><li>6+ years of hands-on experience with Microsoft 365 and Azure security tools</li>
<li>Deep understanding of Microsoft Intune, Defender XDR, Azure AD, and Microsoft Sentinel</li>
<li>Familiarity with Microsoft Purview, Compliance Manager, and M365 DLP</li>
<li>Knowledge of NIST SP 800-171 and CMMC Level 2 requirements</li>
<li>Experience with regulatory/compliance documentation (SSP, POA&amp;M)</li>
<li>Excellent troubleshooting and analytical skills</li>
<li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, or related field</li>
</ul><div>Preferred:</div>
<ul><li>Microsoft certifications such as:</li>
<li>SC-300 (Identity and Access Administrator)</li>
<li>SC-200 (Security Operations Analyst)</li>
<li>MS-500 (Security Administrator)</li>
<li>AZ-500 (Azure Security Engineer)</li>
<li>Experience with GCC High cloud environments</li>
</ul>
<div></div><div><div><b>Other Requirements:</b></div>
<ul><li><b>Work Environment:</b> Office work environment.</li>
<li><b>Background Investigation / Drug Screen/ US Person: </b>Required.</li>
</ul>
<div></div><div><i>REPKON USA reserves the right to modify job descriptions in response to changing business needs.</i></div>
<div><div><div><i>We are proud to be an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Employment decisions are made without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected status in accordance with applicable law.</i></div></div></div></div></div><div></div>

Sr Cybersecurity Analyst

Graphcore

<div><h2 class="jobSectionHeader"><b>About us</b></h2>
<p>
Graphcore is one of the world's leading innovators in Artificial Intelligence compute.</p>
<p>
It is developing hardware, software and systems infrastructure that will unlock the next generation of AI breakthroughs and power the widespread adoption of AI solutions across every industry.</p>
<p>
As part of the SoftBank Group, Graphcore is a member of an elite family of companies responsible for some of the world's most transformative technologies. Together, they share a bold vision: to enable Artificial Super Intelligence and ensure its benefits are accessible to everyone.</p>
<p>
Graphcore's teams are drawn from diverse backgrounds and bring a broad range of skills and perspectives. A melting pot of AI research specialists, silicon designers, software engineers and systems architects, Graphcore enjoys a culture of continuous learning and constant innovation!</p>
<h2 class="jobSectionHeader"><b>
Job Summary</b></h2>
<p>
We are seeking a Compliance Manager to define, implement, and scale security and compliance frameworks spanning our global lab environments. This role will focus on securing sensitive hardware, enforcing access controls, and ensuring engineering data and infrastructure meet required compliance standards.</p>
<p>
You will play a meaningful role in enabling secure AI hardware development by establishing robust processes around lab zoning, asset tracking, and network segmentation while partnering with engineering teams across multiple locations.</p>
<h2 class="jobSectionHeader"><b>
The Team</b></h2>
<p>
You will be part of a cross-functional security and infrastructure team supporting Graphcore's international engineering centers, including the new AI Engineering Campus in Austin.</p>
<p>
The team works closely with hardware engineers, IT, and security stakeholders to ensure compliance controls are embedded into lab environments and operational workflows.</p>
<h2 class="jobSectionHeader"><b>
Responsibilities and Duties</b></h2>
<ul><li>Define and implement physical access controls, including lab zoning and restricted areas</li>
<li>Ensure sensitive hardware is secured and not exposed within lab environments</li>
<li>Enforce network division and permission management across mixed infrastructure environments</li>
<li>Coordinate hardware asset monitoring, inventory oversight, and chain-of-custody activities</li>
<li>Support secure lab bring-up and infrastructure deployment activities</li>
<li>Implement and scale compliance controls across global engineering labs</li>
<li>Partner with engineering departments to ensure secure handling of engineering data through approved systems</li>
<li>Supervise and improve compliance with internal security policies and external standards</li>
<li>Contribute to the development of secure infrastructure practices within AI and hardware environments</li>
</ul><h2 class="jobSectionHeader"><b>Candidate Profile</b></h2>
<p>
Essential:</p>
<ul>
<li>Hands-on experience implementing physical access control and lab zoning</li>
<li>Having worked in labs, data centers, or hardware engineering environments</li>
<li>Practical experience with network segmentation and access control</li>
<li>Experience running hardware asset tracking, inventory, and custody</li>
<li>Experience working in secure infrastructure or lab bring-up environments</li>
<li>Strong understanding of operational security controls in technical environments</li>
</ul><h2 class="jobSectionHeader"><b>Desirable:</b></h2>
<ul><li>Exposure to export-controlled environments</li>
<li>Experience in AI, HPC, semiconductor, or hardware validation labs</li>
<li>Familiarity with BMC / out-of-band (OOB) networks and rack-level infrastructure</li>
<li>Solid understanding of ISO 27001, SOC 2, or NIST frameworks (practical application preferred)</li></ul></div><p></p>

Compliance Manager - Global Lab Environment

CardWorks Servicing

<p>Join our team - and take the next step in achieving a fulfilling career!<br/></p><p>What We Do<br/></p><p>At CardWorks, we aim to help people connect with possibility and opportunity using our financial servicing expertise. Building meaningful, long-term relationships with consumers, our employees, and our clients is what matters most.<br/></p><p>Who We Are<br/></p><p>CardWorks, Inc. is a diversified consumer finance service provider and parent company of CardWorks Servicing, LLC, Merrick Bank and Carson Smithfield, LLC.<br/></p><p>CardWorks Servicing, LLC provides end-to end operational servicing functions for credit cards, secured cards, and installment loans. We service consumer and small business loans across the credit spectrum and offers backup servicing and due diligence services to capital providers and trustees.<br/></p><p>Merrick Bank is an FDIC-insured Utah Industrial Loan Bank. Merrick operates three main business lines: credit cards, recreational lending, and merchant services.<br/></p><p>Carson Smithfield, LLC provides a variety of post-charge-off debt recovery services, including digital self-service, IVR, live agent, and external agency management.<br/></p><p>Position Summary:<br/></p><p>The Security Compliance Manager is an individual contributor responsible for operationalizing, executing, and maturing the enterprise security compliance program. This role reports to the Director of Security Risk &amp; Compliance and ensures that the organization&rsquo;s security compliance strategy is translated into effective operational processes, assessments, and workflows. Core responsibilities include managing compliance operations, executing assessments, reviewing controls, supporting audit readiness, coordinating documentation and evidence, and ensuring accuracy and consistency across compliance systems and reporting.<br/></p><p>Essential Functions:<br/></p><p>Compliance Program Execution<br/></p><p>Execute and continuously improve enterprise security compliance processes and assessments, supporting the strategic direction established by the Manager.<br/>Operate and maintain the security compliance technology platform, ensuring assessments, evidence collection, and issue tracking are completed accurately and on schedule.<br/>Coordinate compliance assessment activities and ensure required documentation is complete and aligned with standards.<br/>Create, manage, and maintain standardized templates, procedures, workflows, and reporting to support consistent compliance operations.<br/></p><p>Security Exception Management<br/></p><p>Execute detailed assessments of security exception requests, documenting risks, mitigating controls, approvals, and expiration tracking, in accordance with governance defined by the Director.<br/>Track exception approvals, expirations, and remediation requirements, ensuring timely reminders, escalations, and accuracy of exception data.<br/></p><p>Security Issue Escalation &amp; Tracking<br/></p><p>Manage execution of the Security Compliance Finding and Issue Escalation process, ensuring control gaps and audit findings are documented, monitored, and remediated on schedule.<br/>Maintain and operationalize workflow steps aligned to governance requirements defined by the Director, ensuring appropriate escalation of overdue or high‑risk issues.<br/>Align information security issue tracking with Enterprise Risk Management processes and escalate high‑risk issues through established governance forums.<br/></p><p>Documentation Governance<br/></p><p>Oversee the Information Security documentation governance program, ensuring policies, standards, procedures, and guidelines are accurate, current, and aligned with regulatory, customer, and internal control requirements.<br/>Implement and maintain the documentation lifecycle processes, including drafting, review, approval, publication, version control, retention, and retirement.<br/>Coordinate updates to documentation to ensure alignment with applicable frameworks such as CRI, NIST CSF, PCI DSS, and CIS 18, reflecting changes in technology, controls, and risk posture.<br/>Track documentation quality, exceptions, gaps, and remediation activities; prepare reports and metrics to support leadership visibility and compliance oversight.<br/>Partner with security, risk, IT, and compliance stakeholders to ensure documentation supports audits, assessments, and ongoing control operation.<br/></p><p>Education and Experience<br/></p><p>8+ years of experience in information security, risk management, compliance, or related disciplines.<br/>Bachelor&rsquo;s degree in IT or related field preferred or equivalent work experience in lieu of degree.<br/>Working knowledge of security frameworks such as Cyber Risk Institute, NIST CSF, CIS Controls, and PCI DSS along with experience applying these and other industry-specific regulations to projects and infrastructure.<br/>Experience in collaborating across diverse teams, including IT, business units, and external stakeholders, to address security requirements and align with project objectives.<br/>Strong understanding of security risk assessment methodologies, controls implementation, and process optimization, with a track record of successfully mitigating risks and enhancing security practices.<br/></p><p>Summary of Qualifications:<br/></p><p>Strong working knowledge of major security frameworks and regulatory requirements, including CRI, NIST CSF, PCI DSS, and CIS Controls, with experience aligning compliance platforms to support assessments and evidence management.<br/>Skilled in optimizing compliance workflows, dashboards, templates, and reporting to enhance operational efficiency and audit readiness.<br/>Proficient with core security technologies such as vulnerability management, encryption, and identity and access management.<br/>Strong analytical and communication skills, able to identify trends, explain complex technical and regulatory concepts, and support cross‑functional collaboration.<br/>Highly organized, detail‑oriented, and capable of managing multiple priorities while improving processes, automation, and program scalability.<br/></p><p>Ideally, the qualified candidate will work at the following location(s): South Jordan, UT; Woodbury, NY; Horsham, PA; Pittsburgh, PA; Orlando, FL. A hybrid work model or fully remote model can be considered based on hiring manager decision and priorities of the role.<br/></p><p>The salary range for this position, if located in NY Metro/NY State is $128,490 to $142,767. However, please note that the salary range will vary for other geographic areas.<br/></p><p>#INDHP<br/></p><p>Our Employee Value Proposition<br/></p><p>Competitive Pay, including a Bonus Target or Variable Pay Incentive Program<br/>Benefits Package -Medical, Dental, and Vision (plus much more)<br/>401(k) Plan with Company Match<br/>Short- &amp; Long-Term Disability<br/>Wellness Programs<br/>Group Life and AD&amp;D Insurance<br/>Paid Vacation, Sick Days and bank Holidays<br/>Employee Engagement Activities including Employee Appreciation Day, DEI Employee Resource Groups, Corporate Social Responsibility, Service Recognition<br/></p><p>We offer a total rewards package comprised of a competitive base rate of pay, variable pay incentive programs based on the role, and a comprehensive benefit suite. Offered rates of pay are determined based on job-related knowledge, relevant experience, skills, certifications, and geographic location.<br/></p><p>We are an equal opportunity employer, and we evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status or any other legally protected characteristic. We will conduct a thorough background check for all hires in compliance with applicable laws.<br/></p>

Manager Security Compliance

Arpatech

<p>ob Title: Information Security Manager</p><p>Location: Karachi (on-site)</p><p>Shift: 9 AM to 6 PM</p><p>We&rsquo;re looking for an experienced Information Security Manager to lead our organization&rsquo;s security operations, compliance efforts, and governance strategy while fostering a culture of cyber resilience across all departments. You&rsquo;ll be responsible for designing and implementing robust security frameworks, ensuring regulatory compliance, managing risks, and driving proactive threat detection and response strategies.</p><p>Key Responsibilities:</p><p>-Lead and manage enterprise-wide information security initiatives.</p><p>-Oversee SOC operations and implement SIEM solutions (experience with Wazuh is highly preferred).</p><p>-Drive vulnerability management and coordinate with DevOps teams to embed security in CI/CD pipelines (DevSecOps).</p><p>-Develop, maintain, and enforce information security policies, standards, and procedures aligned with frameworks such as ISO 27001, NIST, and other industry best practices.</p><p>-Own the organization&rsquo;s GRC (Governance, Risk, and Compliance) function and ensure adherence to relevant laws, regulations, and frameworks.</p><p>-Act as a key liaison during security audits and assessments.</p><p>-Promote awareness and training to build a strong internal security culture.</p><p>--Strong understanding of SDLC.</p><p>Requirements:</p><p>-Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Information Systems, or a related field (Master&rsquo;s degree is a plus).</p><p>-Minimum 8 years of experience in Information Security, with at least 4 years in a leadership or managerial role.</p><p>-Strong understanding of security frameworks like ISO 27001, NIST, and risk management methodologies.</p><p>-Hands-on experience with SOC tools, SIEM platforms, vulnerability scanning, and DevSecOps practices.</p><p>-Proven track record in security compliance, governance, and risk management.</p><p>-Experience working with or managing Wazuh or similar SIEM platforms is highly desirable.</p><p>-Industry certifications such as CISSP, CISM, or CISA are a strong plus.</p><p>Job Type: Full-time</p><p>Work Location: In person</p><p>Work Location: In person</p>

Information Security Manager

Laveer Engineering

<div>
 Requisition Number: 31739
 <br/>
 <br/>
 Company: W Government Services LLC
 <br/>
 <br/>
 Location:
 <br/>
 <br/>
 Cranberry Township, US Washington, US Hopkins, SC, US, 29061
 <br/>
 <br/>
 Are you interested in being part of an innovative team that supports Westinghouse&rsquo;s mission to provide clean energy solutions? At Westinghouse, we recognize that our employees are our most valuable asset and we seek to identify, attract and recruit the most qualified talent while recognizing and encouraging the value of diversity in the global workplace.
 <br/>
 <br/>
 <strong>
  About The Role
  <br/>
  <br/>
 </strong>
 As a Facility Security Officer, you will implement, manage and oversee security measures across Westinghouse Government Services LLC (WGS). You will ensure compliance with regulations. These include the National Industrial Security Program Operating Manual (NISPOM), 32 CFR Part 117, Department of Energy (DOE) Orders, and Department of Defense (DoD) requirements. You will need to comply with Foreign Ownership, Control, and Influence requirements and implementing arrangements, and other applicable U.S. Government security directives. You will ensure the protection of classified information, Controlled Unclassified Information (CUI), and Naval Nuclear Propulsion Information (NNPI) across WGS programs. You will report to the Vice President &amp; COO and be located at either our Cranberry Township, PA, Washington, DC or Columbia, SC sites. Hybrid Work Schedule.
 <br/>
 <br/>
 <strong>
  Key Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Protect classified government information, CUI, and NNPI by maintaining compliance with 32 CFR Part 117 (NISPOM), DOE Orders (e.g., DOE O 470.4B), and applicable nuclear security directives.
  </li>
  <li>
   Develop, implement, and oversee security policies and procedures observing DoD, DOE, and WGS requirements, ensuring full compliance across all program locations.
  </li>
  <li>
   Ensure compliance with CMMC (Cybersecurity Maturity Model Certification) standards by implementing and maintaining security protocols, conducting regular audits, and collaborating with our teams to address and mitigate cybersecurity risks related to facility operations.
  </li>
  <li>
   Administer daily aspects of industrial security programs for multiple classified programs under DoD and DOE oversight.
  </li>
  <li>
   Manage the secure operation of DoD Restricted Areas and Controlled Areas, including at satellite facilities.
  </li>
  <li>
   Oversee placement and access of personnel to ensure program segregation, sensitive data protection, and physical security compliance.
  </li>
  <li>
   Oversee personnel security clearance processing, visit authorizations, and access control systems using DISS, NISS, DOE-specific platforms, and WGS tools.
  </li>
  <li>
   Apply Security Classification Guides (SCGs) to ensure classification, review compiled content, and obtain customer pre-approvals before data transmission.
  </li>
  <li>
   Be the senior contact during security audits, inspections, and self-assessments; lead internal inspections with support from Assistant FSOs and corporate security personnel.
  </li>
  <li>
   Investigate, document, and report security incidents, infractions, and violations; coordinate with corporate management, program teams, and government representatives to ensure and proper resolution.
  </li>
  <li>
   Coordinate with the Information System Security Manager (ISSM) and IT Manager to support accreditation and lifecycle compliance of classified and unclassified information systems.
  </li>
  <li>
   Manage Assistant FSOs and coordinate with site-level security staff to ensure standardized procedures and training implementation.
  </li>
  <li>
   Coordinate the delivery of initial and recurring security briefings, debriefings, and specialized training related to classified access and special category materials.
  </li>
  <li>
   Work together with Export Control personnel to align security procedures with applicable U.S. export regulations and technology transfer controls.
  </li>
  <li>
   Oversee coverage and scheduling of secure and closed areas to maintain separation of programs and secure operations.
  </li>
  <li>
   Ensure enforcement of access policies, conduct daily security checks, and implement visitor controls and random inspections to maintain facility security integrity.
  </li>
  <li>
   Maintain compliance signage, security postings, and classification labeling per federal and contract-specific requirements.
  </li>
  <li>
   Perform proper classification marking at both CUI and classified levels following DoD and DOE standards.
  </li>
  <li>
   Support enterprise-wide security awareness programs, including written guidance and digital communications (e.g., security newsletters).
  </li>
  <li>
   Respond to local alarms and security incidents following established protocols.
  </li>
  <li>
   Complete all required training from the Defense Counterintelligence and Security Agency (DCSA) and the Center for Development of Security Excellence (CDSE) within six months of hire, and maintain current certifications thereafter.
  </li>
  <li>
   Fulfill the responsibilities and maintain the qualifications of a Communications Security (COMSEC) Custodian, as applicable.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor's Degree or equivalent experience.
  </li>
  <li>
   10+ years of experience (can be a combination of related experience in industrial security and the U.S. military) supporting classified program security.
  </li>
  <li>
   Complete the CDSE FSO training for both possessing and non-possessing facilities within 6 months of hire and Insider Threat training course within 3 months of hire. Additional DOE training requirements will apply.
   <br/>
   <br/>
  </li>
 </ul>
 We are committed to transparency and equity in all of our people practices. The base salary range for this position, which is dependent upon experience, qualifications and skills, is estimated to be $112,400 to $140,500 per year.
 <br/>
 <br/>
 <strong>
  Why Westinghouse?
  <br/>
  <br/>
 </strong>
 <strong>
  Benefits
  <br/>
  <br/>
 </strong>
 <strong>
  Our benefits package is tailored to meet the diverse needs of our employees, while also promoting wellness and career growth. The following are representative of what we offer:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Comprehensive Medical benefits which could include medical, dental, vision, prescription coverage and Health Savings Account (HSA) with employer contributions options
  </li>
  <li>
   Wellness Programs designed to support employees in maintaining their health and well-being including Employee Assistance Program providing support for our employees and their household members
  </li>
  <li>
   401(k) with Company Match Contributions to support employees' retirement
  </li>
  <li>
   Paid Vacations and Company Holidays
  </li>
  <li>
   Opportunities for Flexible Work Arrangements to promote work-life balance
  </li>
  <li>
   Educational Reimbursement and Comprehensive Career Programs to help employees grow in their careers
  </li>
  <li>
   Global Recognition and Service Programs to celebrate employee accomplishments and service
  </li>
  <li>
   Employee Referral Program
   <br/>
   <br/>
  </li>
 </ul>
 Westinghouse Electric Company Is The Global Nuclear Energy Industry's First Choice For Safe, Clean, And Efficient Energy Solutions. We Enable Our Delivery Of This Vision By Living Our Value System
 <br/>
 <br/>
 <ul>
  <li>
   Safety and Quality
  </li>
  <li>
   Integrity and Trust
  </li>
  <li>
   Customer Focus and Innovation
  </li>
  <li>
   Speed and Passion to Win
  </li>
  <li>
   Teamwork and Accountability
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  While our Global Headquarters are located in Cranberry Township, PA, we have over 11,000 employees working at locations in 19 different countries. You can learn more by visiting
 </strong>
 http://www.westinghousenuclear.com.
 <br/>
 <br/>
 Westinghouse is an Equal Opportunity Employer including Veterans and Individuals with Disabilities
 <br/>
 <br/>
 <strong>
  Get connected with Westinghouse on social media:
 </strong>
 <strong>
  Twitter
 </strong>
 <strong>
  |
 </strong>
 <strong>
  Facebook
 </strong>
 <strong>
  |
 </strong>
 <strong>
  LinkedIn
 </strong>
 <strong>
  |
 </strong>
 <strong>
  YouTube
  <br/>
  <br/>
 </strong>
 Employment opportunities may require access to information which is subject to the export control regulations of the United States. Hiring decisions for such positions are required by law to be made in compliance with these regulations. Applicants for employment opportunities in other countries must be able to meet the comparable export control requirements of that country and of the United States.
 <br/>
 <br/>
 <strong>
  Job Segment:
 </strong>
 Defense, DoD, Facilities, Information Systems, Security Clearance, Government, Operations, Technology
 <br/>
 <br/>
</div>


Facility Security Officer

Search 10000+ Security compliance manager jobs near you this April. New roles added regularly across leading industries. Apply today.