Facility Security Officer Salary 2026 — FSO Pay & Career Guide
Facility Security Officer (FSO) salary 2026: FSO compensation by clearance level, contractor vs government pay, DoD cleared facility salary ranges, and FSO career advancement.
What Is a Facility Security Officer?
A Facility Security Officer is an employee of a cleared defense contractor who is formally designated by the company to oversee and administer all aspects of the facility's classified information security program. The FSO serves as the primary liaison between the contractor and the DCSA, managing personnel security clearances, physical security controls, information system authorizations, and security education programs.
Unlike a government security officer, an FSO is a private-sector employee — but the role carries substantial federal compliance responsibilities under the National Industrial Security Program Operating Manual (NISPOM), codified at 32 CFR Part 117. Facilities holding a Facility Clearance (FCL) at the Secret or Top Secret level must have at least one designated FSO who themselves hold a personnel security clearance at or above the facility's clearance level.
DCSA Designation Requirements
To be formally designated as an FSO, an individual must satisfy several baseline requirements set by the DCSA and the contractor's Key Management Personnel (KMP) structure:
- U.S. citizenship — FSOs must be U.S. citizens.
- Active personnel security clearance — The FSO must hold a clearance equal to or higher than the facility clearance level (Secret or Top Secret as applicable).
- Insider Threat Program Senior Official (ITPSO) — FSOs at facilities with an active insider threat program may also serve as the ITPSO or designate a separate official.
- KMP designation in DISS — The company's senior management must formally designate the FSO as KMP through the Defense Information System for Security (DISS) portal.
- Full-time or collateral duty — The FSO role may be full-time or collateral depending on facility size, contract volume, and the number of cleared employees.
FSO Certification Programs at a Glance
- Deadline: Within 6 months of designation
- Delivery: CDSE online courses
- Cost: Free
- Prerequisite: Active FCL designation
- Renewal: Annual refresher required
- Issuing Body: CDSE / DCSA
- Exam Format: Multiple choice, proctored
- Experience Required: None (entry-level)
- Renewal: Every 2 years (CPEs)
- Cost: Free for eligible personnel
- Issuing Body: National Classification Management Society (NCMS)
- Experience Required: 3+ years in industrial security
- Exam: 200-question written exam
- Renewal: Every 3 years (60 CPEs)
- Cost: ~$300–$400 exam fee
FSO Orientation Training — 6-Month Requirement
Under 32 CFR Part 117 (NISPOM), every newly designated FSO must complete the DCSA Center for Development of Security Excellence (CDSE) FSO Orientation training within six months of being formally designated. Failure to meet this deadline can result in the DCSA placing the facility clearance under review.
- FSO Orientation for Contractors with Classified Systems — required for facilities with classified information systems or SAP access
- FSO Orientation for Contractors without Classified Systems — for facilities with personnel clearances but no classified IS
- Insider Threat Awareness (INT101) — mandatory for all newly designated FSOs and ITPSOs
- Introduction to Personnel Security (PS011) — foundational clearance investigation and adjudication process
- All CDSE courses are available at cdse.edu and are free of charge to U.S. government employees and cleared contractors
Annual FSO Training Requirements
Beyond initial orientation, the NISPOM requires FSOs to conduct and document annual security refresher training for all cleared employees at the facility. FSOs themselves must also complete continuing education to stay current with DCSA policy changes, new CDSE course releases, and insider threat program updates.
Key annual training obligations include:
- Annual security refresher training for all cleared employees — must be documented in the facility's security files
- Insider Threat Annual Refresher — all cleared employees must receive insider threat awareness training annually
- Derivative Classification Training — required every two years for all original and derivative classifiers
- FSO self-directed continuing education — CDSE webinars, NCMS regional seminars, and ISAC conferences count toward ISP/SFPC renewal CPEs
National Industrial Security Program (NISP)
The National Industrial Security Program is the U.S. government framework under which classified information is shared with private industry. Established by Executive Order 12829 in 1993, NISP is governed by the NISPOM (32 CFR Part 117) and administered by the DCSA as the primary Cognizant Security Agency (CSA) for the Department of Defense and most other federal agencies.
FSOs are the operational linchpin of NISP compliance at the contractor level. Their responsibilities under NISP include managing the Facility Clearance (FCL), processing personnel security clearances through DISS, maintaining visitor control logs, overseeing classified document accountability, administering the Self-Inspection program, and operating the facility's Insider Threat Program.
Security Fundamentals Professional Certification (SFPC)
The SFPC is an entry-level professional certification issued by the CDSE. It is designed for security professionals with limited experience who want to validate their knowledge of the NISPOM, personnel security, physical security, and information security fundamentals. The SFPC is often the first formal credential pursued by newly designated FSOs.
To earn the SFPC, candidates must complete a prescribed set of CDSE courses and pass a proctored, multiple-choice examination. The certification is valid for two years and must be renewed through continuing professional education (CPE) credits or re-examination.
Industrial Security Professional (ISP) Certification
The ISP certification is the premier advanced credential in the industrial security field, awarded by the National Classification Management Society (NCMS). It is widely recognized by cleared defense contractors and the DCSA as the benchmark for experienced FSO competency.
ISP candidates must demonstrate a minimum of three years of hands-on industrial security experience, pass a rigorous 200-question examination covering all NISP program areas, and maintain the credential through 60 CPEs every three years. The ISP exam covers the full scope of FSO duties: personnel security, physical security, information systems security, classification management, international security, and special access programs.
SF-86 Investigations and the DISS System
FSOs are responsible for initiating and tracking personnel security clearance investigations through the Defense Information System for Security (DISS), the DoD's authoritative system of record for personnel security clearance data.
When a cleared employee requires a new, upgraded, or reinvestigated clearance, the FSO sponsors the request in DISS and assists the employee in completing the SF-86 (Questionnaire for National Security Positions) via the e-QIP or NBIS portal. Key FSO responsibilities in this process include:
- Verifying the employee's need-to-know and billet justification before submitting
- Ensuring the SF-86 is complete and accurate before submission to the Defense Counterintelligence and Security Agency
- Monitoring investigation status in DISS and responding to adjudicative requests
- Reporting adverse information on cleared employees as required by NISPOM section 3-103
- Maintaining accurate clearance records and separation notices in DISS
- +Strong job security — cleared defense contractors consistently need qualified FSOs and the pipeline of credentialed candidates is limited
- +Competitive salary range of $65,000–$110,000+ annually depending on facility clearance level, company size, and ISP/SFPC credentials
- +Professionally meaningful work safeguarding national security information at the intersection of government and private industry
- +Clear credentialing pathway — SFPC to ISP provides structured professional growth with widely recognized certifications
- +Broad exposure to DoD programs, DCSA policy, and interagency security requirements, making FSOs highly mobile across the defense industrial base
- −Requires and maintaining an active personnel security clearance — any clearance adjudication issues can end eligibility for the role
- −Significant regulatory burden — FSOs must stay current with NISPOM updates, DCSA policy letters, and annual training mandates
- −Liability exposure — FSOs can be held personally accountable for compliance failures, security violations, or failure to report adverse information
- −Collateral duty roles at smaller facilities may lack dedicated resources, forcing FSOs to balance security responsibilities alongside other job functions
- −Limited remote work flexibility — many FSO duties (visitor control, physical security inspections, classified document management) require on-site presence at the cleared facility
FSO Salary and Career Outlook
Facility Security Officer salaries vary significantly based on geographic location, facility clearance level, employer size, and whether the FSO holds a professional certification such as the ISP. According to current labor market data for 2026:
- Entry-level / collateral-duty FSO: $65,000–$75,000 annually
- Mid-level FSO (3–7 years, SFPC or ISP): $80,000–$95,000 annually
- Senior FSO / Security Manager (ISP, TS/SCI): $95,000–$110,000+ annually
- Top Secret / SCI facility FSOs in high-cost metro areas (DC, Northern Virginia, San Diego): can exceed $120,000
FSOs who transition from full-time security roles into Security Manager or Director of Security positions at large primes (Lockheed Martin, Northrop Grumman, Raytheon, Booz Allen Hamilton) often see total compensation packages well above the base figures. ISP certification is frequently listed as a preferred or required qualification in senior FSO job postings.