Site Collateral Information System Security Manager (ISSM)

Lockheed Martin; Moorestown Township (NJ); On-site; USD 145,000 - 270,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Flexible work arrangements

401(k) match

Paid time off

Holidays

Parental Leave

EAP

Flexible Spending Accounts

Education Assistance

Life Insurance

Short-Term Disability

Long-Term Disability

Job summary

Lockheed Martin in Moorestown, NJ seeks an Information System Security Manager (ISSM) for RMS Moorestown to lead classified cyber security initiatives, manage risk to information systems, and enable mission execution for portfolio programs.

The ISSM will mentor Alternate ISSMs/ISSOs, ensure RMF compliance with NIST/DoD guidelines, and collaborate with government and customer security agencies while planning for future security domains and enhancements.

Qualifications

• DoD 8140/8570 IAM/IAT or IASAE Level III certification (e.g., CISSP, CCSP, CISSP-ISSAP, or CISSP-ISSEP).
• RMF/DIACAP or RMF artifacts development and review.
• Hands-on information assurance tools and RMF artifact experience.
• Interfacing with internal and external stakeholders (PMO, DCSA ISSP).
• Knowledge of DoD/NIST security frameworks and accreditation processes.

Responsibilities

• Provide guidance and mentorship to Alternate ISSMs and ISSOs on tactical milestones.
• Serve as ISSM of record for Moorestown Cage Code to ensure compliance.
• Lead CCS program function and align with management to achieve strategic goals.
• Assist leadership in recruitment, development and retention of local cyber security talent.
• Develop relationships with government and customer security agencies for compliance.
• Plan and implement current and future security domains (e.g., cloud, AI/ML).

Skills

Cloud migration

System hardening

Vulnerability management

Security requirements

Info Assurance

STIGs experience

Education

DoD 8140/8570 IAM/IAT or IASAE Level III certification

Tools

Nessus

Splunk

Job description

Standard Job Description

As the Information System Security Manager (ISSM) for RMS Moorestown, you will lead by example in advancing the RMS Classified Cyber Security mission – “Keep our customers ahead of ready by effectively and efficiently managing security risk to information systems; enabling mission execution, meeting customer requirements, and delivering 21st Century security that supports deterrence, growth and continuous improvement.” The incumbent will report to the Moorestown Site Manager, Classified Cyber Security within the Rotary and Mission Systems (RMS) business area.

In this role you must embody the foundation of Leadership and Technical Excellence, hold yourself and your peers accountable to our four strategic priorities of Operational Enablement, Risk Reduction, Workforce Development, and Cost-Conscious compliance.

• Provide guidance and mentorship to Alternate ISSMs and Information System Security Officers (ISSOs) executing on tactical milestones, ensuring success for portfolio programs and the Classified Cyber Security organization.
• Serve as the ISSM of record for the Moorestown Cage Code to ensure compliance with government and company security requirements.
• Embody the Classified Cyber Security (CCS) Program function and share the CCS vision with the Program Management leadership team to execute the strategic goals of the assigned portfolio.
• Assist leadership with the recruitment, development, and retention of local classified cyber security talent essential for maintaining secure operations.
• Develop relationships with multiple government and customer security agencies to ensure compliance with Department of Defense Information operating environments (e.g., NISPOM, etc.).
• Participate in planning and implementation of current and future security domains including those which may introduce new service areas (e.g. OneLM Networks, Cloud Computing, AI/ML).

Ensure compliance to governing documents and security policies and assist in regulatory periodic assessments. Implements and tests state-of-the-art secure operating systems, networks, and database solutions. Stays current with system vulnerabilities and provides current security training to all system users. Conducts risk assessments and provides recommendations for secure implementation and compliance in accordance with government regulations and information assurance/cybersecurity guidelines. Creates, maintains and submits information system security documents and reports to regulatory agencies. Assesses and mitigates system security threats/risks throughout the program life cycle; validates system security requirements definition and analysis; establishes system security documentation; assists with the implementation of security procedures; verifies information system security requirements; performs information system certification and accreditation planning, testing, assessing and liaison activities. Familiar with information system security architectural documentation standards. Able to apply information assurance / cyber security standards, directives, guidance and policies to an architectural/risk based framework. Provide architectural / risk based analysis of information assurance / cyber security features and relate existing system to future needs and trends and requirements. For engineers providing security information assurance, use Info Assurance Engineer (E254, L254). For security professionals providing systems security analysis, use Computer Systems Security Analysis (E121, L121).

Basic Qualifications

• Must possess a DoD 8140/8570 IAM/IAT or IASAE Level III certification (e.g., CISSP, CCSP, CISSP-ISSAP, or CISSP-ISSEP)
• Previous experience working with system accreditation requirements and NIST800‑53 (DAAG/JSIG) RMF implementation
• Hands on experience with industry standard Information Assurance tools
• Experience with developing, reviewing and maintaining RMF artifacts
• Experience interfacing directly with internal stakeholders (e.g. Program Management Office) and external stakeholders (e.g. DCSA ISSP)

Desired Skills

• In-depth experience in migrating ISOLANs to Cloud Computing Environments (e.g. C3E, etc.)
• In-depth experience in system hardening, analysis, and vulnerability management
• Experience implementing and documenting security requirements for complex technologies within large environments, possessing strong technical skills
• Experience setting up or using TenableNessus / Security Center and Splunk
• Experience implementing or validating Secure Technical Implementation Guidance (STIGs)

Pay Information

Full-Time Salary Range: $145100.00 - $269500.00

At Lockheed Martin, we know mission success starts with taking care of our people. Our Total Rewards program is designed to attract top talent, support your well-being, and help you grow—both professionally and personally.

The salary range for this position is as listed on the requisition. Please note that the salary information listed is a general guideline only. Lockheed Martin considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/ training, key skills as well as market(work location) and business considerations when extending an offer.

Benefits offered

Medical, Dental, Vision, Flexible work arrangements and schedules (e.g., 4x10), 401(k) match, Paid time off, Holidays, Parental Leave, EAP, Flexible Spending Accounts, Education Assistance, Life Insurance, Short-Term Disability, and Long-Term Disability.

• Annual short-term and/or long-term incentive compensation programs may be offered depending on the position. Payments under these annual programs are not guaranteed and can vary from year to year and are tied to a range of performance metrics.
• For (Washington state applicants only) Non-represented full-time employees: accrue at least 10 hours per month of Paid Time Off (PTO) to be used for incidental absences and other reasons; receive at least 90 hours for holidays. Represented full time employees accrue 6.67 hours of Vacation per month; accrue up to 52 hours of sick leave annually; receive at least 96 hours for holidays. PTO, Vacation, sick leave, and holiday hours are prorated based on start date during the calendar year.