Sr. Staff Facility Security Officer (FSO)

Job description

Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes. Job Summary *This role requires 3 days per week in our Reston, VA office* The Facility Security Officer (FSO) is responsible for the overall management, administration, and oversight of the organization's U.S. Government industrial security program, personnel security clearance program, Facility Security Clearance (FCL), and Sensitive Compartmented Information Facility (SCIF). This position serves as the primary liaison with the Defense Counterintelligence and Security Agency (DCSA), formerly the Defense Security Service (DSS), U.S. Government security agencies, customers, prime contractors, and subcontractors. The individual is accountable for ensuring compliance with the National Industrial Security Program (NISP), 32 CFR Part 117 (NISPOM), applicable Intelligence Community Directives (ICDs), SCIF accreditation requirements, and other federal and contractual security requirements. This is a security leadership position requiring the ability to independently manage complex security programs, maintain government compliance, protect classified information, identify and mitigate security risks, and provide direct security guidance to executive leadership. #LI-KR1 Role DescriptionPalo Alto Networks is seeking a Sr. Staff Facility Security Office (FSO) to join the Information Security  Government Security and Risk team, supporting the management of US personnel security clearances and the standardization of US security clearance and personnel security governance processes. This role will report into the InfoSec Organization and offers an excellent opportunity for a detail-oriented and proactive security professional to contribute to a fast-growing global organization. You will play a critical role in enabling secure operations across the US by ensuring personnel security processes align with regulatory, contractual, and government security requirements and managing a SCIF. KEY RESPONSIBILITIES 1. Industrial Security Program & Government Compliance Direct and manage the organization's NISPOM compliance program and maintain the Facility Security Clearance (FCL). Serve as the primary liaison with DCSA, government security representatives, and customer security offices. Develop, maintain, and oversee the organization's Security Program Plan (SPP), security policies, procedures, and operating instructions. Conduct annual self-inspections, support DCSA inspections and assessments, and manage corrective action plans. Ensure ongoing compliance with applicable federal regulations, government contracts, and security requirements. 2. Personnel Security & Clearance Management Manage the complete lifecycle of U.S. Government personnel security clearances, including initial requests, sponsorship, reinstatements, upgrades, transfers, reinvestigations, continuous vetting, and debriefings. Oversee clearance eligibility verification, access authorization, indoctrinations, and personnel security records. Ensure timely reporting of adverse information, personnel status changes, foreign contacts, and other reportable security matters. Establish and manage security education, awareness, briefing, and training programs. 3. SCIF & Physical Security Management Oversee the security, administration, and operational compliance of the organization's SCIF. Collaborate with the ISSO to coordinate SCIF accreditation, inspections, access authorization, visitor control, security procedures, and required documentation with government accrediting officials. Manage physical security requirements, access controls, intrusion detection systems, security infrastructure, and facility protection. Ensure classified information, materials, equipment, and technical resources are appropriately safeguarded. Coordinate SCIF modifications, maintenance, and security system requirements with authorized government representatives. 4. Contract Security & Visitor Management Manage and track DD Form 254 (Contract Security Classification Specification) requests, revisions, and documentation for prime and subcontractor companies. Establish and oversee incoming and outgoing classified visit requests, visitor authorization, and classified meeting coordination. Coordinate security requirements with government customers, prime contractors, subcontractors, and program management. Ensure contract security requirements are properly communicated and implemented. 5. Foreign Travel, FOCI & Risk Management Manage foreign travel reporting requirements and provide required defensive security briefings to personnel traveling internationally. Monitor foreign investments, acquisitions, ownership changes, sales, and business relationships for potential Foreign Ownership, Control, or Influence (FOCI) concerns. Coordinate with executive leadership, legal counsel, and government security representatives regarding FOCI risks, reporting, and mitigation requirements. Help ensure foreign entities do not gain unauthorized access to classified information, export-controlled information, controlled technical data, or other protected information. Coordinate with export compliance and technology control personnel on applicable security requirements. 6. Security Incidents, Inspections & Executive Reporting Manage security incident identification, reporting, investigation coordination, and corrective actions. Maintain continuous inspection readiness and ensure security deficiencies are addressed promptly. Provide regular executive reporting on clearance status, FCL compliance, SCIF operations, inspection results, security risks, FOCI concerns, and corrective actions. Advise executive leadership on security requirements, emerging risks, regulatory changes, and organizational security obligations. Qualifications Minimum of 7+ years of progressive experience in industrial security, government security administration, classified program security, or classified facility management. Demonstrated experience managing a U.S. Government Facility Security Clearance (FCL) and personnel security clearance program. Direct experience overseeing or managing a SCIF and its associated security and accreditation requirements. Thorough knowledge of NISP, NISPOM (32 CFR Part 117), and applicable Intelligence Community Directives. Demonstrated experience working with DCSA, government security agencies, and customer security representatives. Experience managing personnel clearances, DD Form 254 documentation, classified visitor control, and security inspections. Working knowledge of FOCI requirements, foreign ownership reporting, and security mitigation arrangements. Experience developing security policies, conducting self-inspections, managing corrective actions, and maintaining government compliance documentation. Experience assessing or operating security controls in