The position will serve as the Lead ISSO for the Governance & Compliance Team Lead position, responsible for establishing and maintaining the security posture of assigned information systems across the classified environments. Reporting to the Information System Security Manager, the position will serve as the primary cybersecurity liaison with program managers, auditors, configuration management teams, and external assessment bodies.
The role drives the development, upkeep, and validation of all authorization to operate (ATO) artifacts such as: system security plans, hardware and software inventories, network diagrams, and user listings to ensure that security controls are fully implemented, continuously monitored, and documented in compliance tools such as eMASS and Q Compliance. Core duties include coordinating RMF activities, conducting self inspections and readiness assessments, managing continuous monitoring processes, and maintaining up to date compliance dashboards. The Team Lead also oversees configuration management, controls access and privileged accounts, administers interconnection security agreements, and ensures that security awareness and training requirements are met for all personnel. Incident response responsibilities encompass developing and exercising response plans, coordinating real world or simulated events, and documenting all actions and lessons learned.
Additionally, the position develops and maintains contingency and media protection plans, verifies backup and sanitization procedures, and provides regular briefings to leadership on risk, compliance status, and remediation progress. Candidates should have a minimum of five years of experience in continuous monitoring, security control assessment, and compliance management within DoD or comparable regulated environments, with strong knowledge of RMF, NIST SP 800‑53, and associated tooling, as well as proven leadership and communication skills. This position requires flexibility to support mission critical tasks, including off shift work when necessary, to ensure the organization’s information systems remain secure, auditable, and mission ready.
All candidates must possess a Secret Clearance.
All candidates must possess a DoD 8570 IAM Level I certification or higher (e.g., Security + CE, CAP, CASP CE, CISM, CISSP, GSLC, or equivalent).
Demonstrated experience applying and documenting policy and system configurations that satisfy NIST 800-53 Security Control requirements across all Control Families.
Demosntrate experience with eMASS.
Ability to interpret the requirements necessary for the effective implementation of Security Controls. Technologies include but are not limited to Windows, Linux, Virtualization, Network Infrastructure, etc.
Ability to develop and update relevant RMF artifacts such as the System Security Plan (SSP), Plan of Actions and Milestones (POA&M), Security Controls Traceability Matrix (SCTM), as well as the associated security policies and procedures.
Strong interpersonal skills with the ability to influence others to gain support.
Demonstratable experience conducting internal and external customer assessments identifying areas for improvement and developing and implementing corrective action plans.
Proven ability to evaluate proposed changes or additions to the information system, including: assessing their security relevance, providing advisory support to the ISSM, ensuring compliance with relevant regulations and standards.
Prior experience as an Information System Security Manager (ISSM) or Information System Security Officer (ISSO), with a proven track record of: Collaborating with a team of ISSOs to satisfy requirements and achieve goals and providing leadership and guidance on information system security matters.
Ability to perform continuous monitoring activities using Industry Standard tools such as Tenable Nessus, Security Center, Splunk, HBSS ePO, etc.
Experience leveraging Defense Information System Agency (DISA) Security Technical Implementation Guides (STIGs) and configuration standards to support system hardening.
Pay Information
Full-Time Salary Range: $104900.00 - $194700.00
At Lockheed Martin, we know mission success starts with taking care of our people. Our Total Rewards program is designed to attract top talent, support your well-being, and help you grow—both professionally and personally.
The salary range for this position is as listed on the requisition. Please note that the salary information listed is a general guideline only. Lockheed Martin considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/ training, key skills as well as market(work location) and business considerations when extending an offer.
Benefits offered: Medical, Dental, Vision, Flexible work arrangements and schedules (e.g., 4x10), 401(k) match, Paid time off, Holidays, Parental Leave, EAP, Flexible Spending Accounts, Education Assistance, Life Insurance, Short-Term Disability, and Long-Term Disability.
- Annual short-term and/or long-term incentive compensation programs may be offered depending on the position. Payments under these annual programs are not guaranteed and can vary from year to year and are tied to a range of performance metrics.
- For (Washington state applicants only) Non-represented full-time employees: accrue at least 10 hours per month of Paid Time Off (PTO) to be used for incidental absences and other reasons; receive at least 90 hours for holidays. Represented full time employees accrue 6.67 hours of Vacation per month; accrue up to 52 hours of sick leave annually; receive at least 96 hours for holidays. PTO, Vacation, sick leave, and holiday hours are prorated based on start date during the calendar year.
Skills Required
- Minimum five years of experience in continuous monitoring, security control assessment, and compliance management within DoD or comparable regulated environments
- Secret security clearance
- DoD 8570 IAM Level I certification or higher, such as Security+ CE, CAP, CASP CE, CISM, CISSP, or GSLC
- Experience applying and documenting policies and system configurations satisfying NIST SP 800-53 security control requirements across all control families
- Experience with eMASS
- Ability to interpret and implement security control requirements
- Experience with Windows, Linux, virtualization, and network infrastructure
- Ability to develop and update RMF artifacts, including SSPs, POA&Ms, and SCTMs
- Experience conducting internal and external customer assessments and implementing corrective action plans
- Experience evaluating system changes for security relevance and regulatory compliance
- Prior ISSM or ISSO experience with team leadership and guidance responsibilities
- Experience using Tenable Nessus, Security Center, Splunk, or HBSS ePO for continuous monitoring
- Experience using DISA STIGs and configuration standards for system hardening
Lockheed Martin Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Lockheed Martin and has not been reviewed or approved by Lockheed Martin.
-
Retirement Support — Retirement benefits are described as a standout element, with a strong 401(k) program and options like an employee stock purchase plan. Feedback suggests these features meaningfully enhance total compensation and long‑term financial security.
-
Healthcare Strength — Healthcare coverage is portrayed as comprehensive from day one, with multiple plan options, mental health resources, and virtual care. Wellness supports such as on‑site services and preventive programs are also highlighted.
-
Flexible Benefits — Work arrangements often include compressed schedules and telework, contributing to a favorable work‑life balance. Feedback suggests this flexibility is a key reason many view the overall package positively.
Lockheed Martin Insights
What We Do
Customer Focus, Innovation and Purpose are Built Into Everything We Do. Lockheed Martin. Your Mission is Ours ™. Headquartered in Bethesda, Maryland, Lockheed Martin is a global security and aerospace company principally engaged in the research, design, development, manufacture, integration and sustainment of advanced technology systems, products and services.
