Facility Security Officer (FSO) and CMMC Manager (Top Secret Clearance Required)

READY TO JOIN OUR TEAM?

Do you currently hold an active Top-Secret clearance? Are you a certified or experienced Facility Security Officer (FSO) with proven expertise in Cybersecurity Maturity Model Certification (CMMC) compliance? Do you thrive in a fast-paced, in-office environment leading corporate security and compliance programs? If so, we invite you to read on.

ABOUT THIS ROLE

St. Michael's is hiring a Facility Security Officer (FSO) & CMMC Manager to serve as a key member of our corporate headquarters security team in Tampa, FL. In this full-time, in-office role , you will own the day-to-day administration of the company's National Industrial Security Program (NISP) and lead CMMC compliance efforts across the enterprise. You will report directly to Human Resources and collaborate with IT, contracts, and program leadership to maintain a robust security posture while enabling business growth in the DoD contracting space.

LOCATION

Tampa, FL (Hybrid Work Schedule with 3 days on site per week)

WHO YOU ARE

• Active Top-Secret Clearance (with ability to maintain SCI eligibility
• FSO certification (FSO Program Management for Possessing Facilities) or 3+ years serving as an FSO/AFSO in a cleared contractor environment
• 1+ years of direct experience implementing and managing CMMC Level 2+ frameworks, including NIST 800-171 controls, SPRS scoring, and third-party assessments (C3PAO readiness)
• Expert knowledge of NISPOM, DISS, e-QIP, NBIS, and SWFT
• Demonstrated ability to conduct security vulnerability assessments, develop POA&Ms, and lead corrective actions
• Experience training personnel on security awareness, insider threat, and CUI handling
• Bachelor's degree preferred; high school diploma or equivalent required

PRIMARY RESPONSIBILITIES

• Administer the FCL and personnel security program via DISS, e-QIP, and NISS
• Process, track, and adjudicate initial, periodic, and crossover clearances (Secret to TS/SCI)
• Lead annual self-inspections, DCSA audits, and insider threat program compliance
• Develop and deliver security awareness training, briefings, and debriefings
• Manage DD Form 254 preparation/review for prime and subcontract awards
• Oversee classified visits, document accountability, and COMSEC (if applicable)
• Investigate and report security incidents, adverse information, and foreign travel
• Ensure CMMC Level 2+ and DFARS 7012 compliance for controlled unclassified information (CUI)
• Serve as the Insider Threat Program Senior Official (ITPSO)
• Lead enterprise-wide CMMC compliance program: maintain System Security Plans (SSPs), conduct gap assessments, oversee control implementation, and prepare for C3PAO audits
• Administer DISS, NISS, and e-APP; process initial, crossover, and upgrade clearance actions
• Conduct security self-inspections, prepare for DCSA Security Vulnerability Assessments (SVAs),
• Develop and deliver annual security training (CMMC, OPSEC, phishing, CUI, etc.)
• Manage classified document control, visitor access, and badge/CAC issuance
• Compile and submit SPRS scores; track NIST 800-171 and CMMC control status in real time