Scott Keefer

• Lead enterprise Industrial Security Program for a cleared federal contractor, ensuring alignment with NISPOM (32 CFR Part 117) and safeguarding classified information across personnel, facilities, and contract operations • Serve as primary interface with DCSA; accountable for facility clearance (FCL), reporting obligations, and overall security program execution • Oversee full lifecycle personnel security operations, including clearance processing, access determinations, indoctrinations, debriefings, and Continuous Evaluation (CE) monitoring • Direct contract security compliance through DD254 review, classification guidance, and implementation of safeguarding and reporting protocols • Lead development and implementation of security policies, SOPs, and governance frameworks to strengthen compliance and audit readiness • Execute internal assessments and annual DCSA self-inspections; identify gaps and drive corrective actions to improve program maturity • Strengthen physical security posture through oversight of access control, visitor management, alarm systems, and surveillance solutions • Establish and lead Insider Threat Program in accordance with NISPOM; integrate personnel, information security, and behavioral risk indicators • Chair Insider Threat Working Group (ITPWG); coordinate HR, IT, Security, and leadership to identify and mitigate insider risks • Drive alignment to CMMC and NIST SP 800-171 requirements across cross-functional stakeholders • Led ICD 705-compliant SCIF build-out and accreditation, including construction security, TSCM coordination, and AO approval Previous FSO Roles: Synergy, LLC (2025), Eqlipse Technologies (2023-2024)

• Executed system-level security controls in alignment with NIST SP 800-53 and the Risk Management Framework (RMF), ensuring compliance across mission systems • Conducted security assessments, risk analyses, and vulnerability management activities to identify and mitigate system-level risks • Supported Authorization to Operate (ATO) lifecycle by coordinating with ISSM and Authorizing Official (AO), maintaining compliance with accreditation requirements • Performed continuous monitoring activities, including monthly vulnerability scanning, remediation tracking, and POA&M management • Developed and enforced system security policies and procedures to protect system confidentiality, integrity, and availability (CIA triad) • Strengthened system security posture by driving remediation of identified vulnerabilities and improving overall compliance with federal cybersecurity standards Previous ISSO Roles: Synergy, ECP (2021-2022), CyberCore Technologies (2020-2021)

• Led team of 8 personnel supporting software validation operations across 15,000+ software products in a controlled environment • Directed workload distribution, ticket prioritization, and SLA performance, ensuring efficient handling of high-volume user requests • Evaluated FOSS and COTS solutions under strict security constraints, balancing mission needs with risk and policy enforcement • Oversaw software approval and purchase authorization processes, ensuring adherence to security policies and governance requirements • Coordinated across technical and operational stakeholders to maintain consistency in software validation, approval, and deployment practices

• Directed security operations in alignment with NISPOM (32 CFR Part 117), ensuring compliance across personnel, physical, and information security domains supporting classified programs • Served as primary interface with Program Managers and oversight authorities, translating classified contract requirements into enforceable, mission-aligned controls • Owned program-level risk management, identifying, assessing, and mitigating threats to classified operations while ensuring timely escalation of reportable incidents and adverse information • Led internal self-inspections, audit readiness efforts, and government reviews; drove corrective actions to closure and sustained a compliant, audit-ready posture • Managed classified material lifecycle (receipt, storage, transmission, destruction) with strict accountability and zero tolerance for unauthorized disclosure • Advised senior leadership on security risk, compliance posture, and operational impacts, enabling informed decision-making at program and enterprise levels • Integrated security into daily operations by aligning cross-functional stakeholders (program management, IT, facilities) to ensure security was embedded into execution • Strengthened organizational security culture through targeted briefings, awareness initiatives, and enforcement of accountability across cleared personnel

• Supported civilian hiring and clearance suitability processes in alignment with USG and NSA/CSS security standards, ensuring compliance with federal adjudicative requirements • Conducted detailed reviews and analysis of clearance investigation records, employment documentation, background investigation reports, and polygraph results to support suitability determinations • Initiated and coordinated clearance processing actions, including local and national agency checks, background investigation requests, psychiatric evaluation referrals, and polygraph scheduling • Provided risk-informed recommendations on clearance suitability based on analysis of investigative findings and adjudicative criteria • Maintained and managed security databases supporting clearance adjudication and hiring processes, ensuring accuracy and availability of critical information for stakeholders • Collaborated with cross-functional stakeholders to support efficient, compliant processing of personnel security actions within a high-tempo environment