Short DescriptionThe Work:This Information System Security Manager (ISSM) position is responsible for the F-35 cybersecurity program at
Eglin AFB, FL and leads the Information System Security Officer(s) (ISSO) in developing, maintaining, and overseeing the cybersecurity of assigned classified and/or unclassified F-35 systems. Typical responsibilities of the ISSM include but are not limited to:
- Drive the development, review, and adherence of the site's F-35 cybersecurity program; the related policies, plans and procedures for assigned systems.
- Lead and manage assigned ISSO(s) in successful execution of the site's F-35 cybersecurity program, to include assuming ISSO responsibilities in their absence.
- Ensure the implementation and assessment of required cybersecurity controls, as defined by the system authorization body of evidence, for assigned systems.
- Incident response focal point: ensure timely and accurate communication, documentation, investigation, response and closure to cyber incidents.
- Ensure POA&Ms or remediation plans are in place for vulnerabilities identified during monitoring activity, audits, inspections, etc. and implement, or oversee, corrective actions.
- Create, collect and retain data to meet reporting requirements.
- Monitor and recognize non-compliance, anomalous activity, and effectively report and track such activity and associated risks.
- Conduct self-inspections and prepare for customer inspections.
- Interact professionally during the enforcement of security policy and procedures.
Assigned systems may vary in classification, capabilities, and complexity. Mission requirements may require other than first-shift work and additional responsibilities as assigned.
Standard Job DescriptionLeads those ensuring compliance to governing documents and security policies and assist in regulatory periodic assessments. Implements and tests state-of-the-art secure operating systems, networks, and database solutions. Stays current with system vulnerabilities and provides current security training to all system users. Conducts risk assessments and provides recommendations for secure implementation and compliance in accordance with government regulations and information assurance/cybersecurity guidelines. Creates, maintains and submits information system security documents and reports to regulatory agencies. Assesses and mitigates system security threats/risks throughout the program life cycle; validates system security requirements definition and analysis; establishes system security documentation; assists with the implementation of security procedures; verifies information system security requirements; performs information system certification and accreditation planning, testing, assessing and liaison activities. Familiar with information system security architectural documentation standards. Able to apply information assurance / cyber security standards, directives, guidance and policies to an architectural/risk based framework. Provide architectural / risk based analysis of information assurance / cyber security features and relate existing system to future needs and trends and requirements. For engineers providing security information assurance, use Info Assurance Engineer (E254, L254). For security professionals providing systems security analysis, use Computer Systems Security Analysis (E121, L121).
Basic Qualifications- Final Transferable Secret security clearance; last Periodic Reinvestigation must be within the last five (5) years or enrollment in Continuous Vetting program.
- Ability to obtain and maintain Special Access Program (SAP) access.
- Expertise in cybersecurity with a track record of leading technical teams to deliver complex projects using artifact-backed solutions based on independent analysis of information.
- Excellent communication, facilitation, and stakeholder management skills.
- Ability to translate technical concepts into operationally relevant language.
- Possess a valid certification that meets or exceeds DoD 8570.01-M IAM II requirements.
- Meets: CASP+ CE, CGRC, CISM, CISSP (or Assc), GSLC, CCISO, HCISPP
- Prior experience in a cyber workforce role, as categorized by the NICE or DoD workforce frameworks.
Desired Skills- Prior experience as an ISSO, ISSM or related DoD Cyber Workforce Role on one or more F-35 information systems.
- Prior experience ensuring compliance with applicable laws, regulations, guidance and policies as they relate to DoD cybersecurity and SAPs (e.g., DoDI 8510.01, JSIG, DoDM 5205.07, NIST SP 800 series).
- Familiarity with F-35 product lifecycle management and sustainment operations, to include the system authorization process and associated artifacts (e.g., SSP, SCTM, Security CONOPs, SOPs).
- Experience using and configuring cyber SIEM and compliance tools (e.g., Splunk, Tenable).
Pay InformationFull-Time Salary Range: $116100.00 - $215700.00
At Lockheed Martin, we know mission success starts with taking care of our people. Our Total Rewards program is designed to attract top talent, support your well-being, and help you grow-both professionally and personally.
The salary range for this position is as listed on the requisition. Please note that the salary information listed is a general guideline only. Lockheed Martin considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/ training, key skills as well as market(work location) and business considerations when extending an offer.
Benefits offered: Medical, Dental, Vision, Flexible work arrangements and schedules (e.g., 4x10), 401(k) match, Paid time off, Holidays, Parental Leave, EAP, Flexible Spending Accounts, Education Assistance, Life Insurance, Short-Term Disability, and Long-Term Disability.
- Annual short-term and/or long-term incentive compensation programs may be offered depending on the position. Payments under these annual programs are not guaranteed and can vary from year to year and are tied to a range of performance metrics.
- For (Washington state applicants only) Non-represented full-time employees: accrue at least 10 hours per month of Paid Time Off (PTO) to be used for incidental absences and other reasons; receive at least 90 hours for holidays. Represented full time employees accrue 6.67 hours of Vacation per month; accrue up to 52 hours of sick leave annually; receive at least 96 hours for holidays. PTO, Vacation, sick leave, and holiday hours are prorated based on start date during the calendar year.
